Provide references for further information: Can you share references or external links related to CVE-2009-1558?

{'name': 'wvc54gca-admfile-dir-traversal(50231)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/50231'}, {'name': '34713', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34713'}, {'name': 'ADV-2009-1173', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/1173'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-3/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1558?


Explain the CVE ID: What does the identifier CVE-2009-1559 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1559.

Absolute path traversal vulnerability in adm/file.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R24 and possibly 1.00R22 allows remote attackers to read arbitrary files via an absolute pathname in the this_file parameter.  NOTE: traversal via a .. (dot dot) is probably also possible.


Provide references for further information: Can you share references or external links related to CVE-2009-1559?


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1559?


Explain the CVE ID: What does the identifier CVE-2009-1560 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1560.

The Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 stores passwords and wireless-network keys in cleartext in (1) pass_wd.htm and (2) Wsecurity.htm, which allows remote attackers to obtain sensitive information by reading the HTML source code.


Provide references for further information: Can you share references or external links related to CVE-2009-1560?

{'name': 'wvc54gca-pass-wsecurity-info-disclosure(50410)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/50410'}, {'name': 'ADV-2009-1173', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/1173'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-4/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1560?


Explain the CVE ID: What does the identifier CVE-2009-1561 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1561.

Cross-site request forgery (CSRF) vulnerability in administration.cgi on the Cisco Linksys WRT54GC router with firmware 1.05.7 allows remote attackers to hijack the intranet connectivity of arbitrary users for requests that change the administrator password via the sysPasswd and sysConfirmPasswd parameters.


Provide references for further information: Can you share references or external links related to CVE-2009-1561?

{'name': '20090418 Linksys WRT54GC - Admin Password Change (POC)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2009-04/0198.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/0904-exploits/linksysadmin-passwd.txt'}, {'name': 'ADV-2009-1172', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/1172'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.falandodeseguranca.com/?p=17'}, {'name': '34616', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34616'}, {'name': '34805', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34805'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1561?


Explain the CVE ID: What does the identifier CVE-2009-1563 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1563.


Provide references for further information: Can you share references or external links related to CVE-2009-1563?


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1563?


Explain the CVE ID: What does the identifier CVE-2009-1564 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1564.

Heap-based buffer overflow in vmnc.dll in the VMnc media codec in VMware Movie Decoder before 6.5.4 Build 246459 on Windows, and the movie decoder in VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, and VMware Server 2.x on Windows, allows remote attackers to execute arbitrary code via an AVI file with crafted video chunks that use HexTile encoding.


Provide references for further information: Can you share references or external links related to CVE-2009-1564?

{'name': '39206', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39206'}, {'name': '63614', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/63614'}, {'name': '[security-announce] 20100409 VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.vmware.com/pipermail/security-announce/2010/000090.html'}, {'name': '36712', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/36712'}, {'name': '20100409 VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html'}, {'name': '20100409 VMware VMnc Codec Heap Overflow Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=866'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/security/advisories/VMSA-2010-0007.html'}, {'name': '39363', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39363'}, {'name': '1023838', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1023838'}, {'name': '39215', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39215'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2009-36/'}, {'name': '20100409 VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1564?


Explain the CVE ID: What does the identifier CVE-2009-1565 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1565.

vmnc.dll in the VMnc media codec in VMware Movie Decoder before 6.5.4 Build 246459 on Windows, and the movie decoder in VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, and VMware Server 2.x on Windows, allows remote attackers to execute arbitrary code via an AVI file with crafted HexTile-encoded video chunks that trigger heap-based buffer overflows, related to "integer truncation errors."


Provide references for further information: Can you share references or external links related to CVE-2009-1565?

{'name': '39206', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39206'}, {'name': '[security-announce] 20100409 VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.vmware.com/pipermail/security-announce/2010/000090.html'}, {'name': '36712', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/36712'}, {'name': '20100409 VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/security/advisories/VMSA-2010-0007.html'}, {'name': '63615', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/63615'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2009-37/'}, {'name': '1023838', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1023838'}, {'name': '39364', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39364'}, {'name': '39215', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39215'}, {'name': '20100409 VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1565?


Explain the CVE ID: What does the identifier CVE-2009-1566 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1566.

Integer overflow in Roxio Easy Media Creator 9.0.136, and Roxio Creator 2010 before SP1, might allow remote attackers to execute arbitrary code via an image with crafted dimensions.


Provide references for further information: Can you share references or external links related to CVE-2009-1566?

{'name': '20091202 Secunia Research: Roxio Creator Image Rendering Integer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/508165/100/0/threaded'}, {'name': '37183', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/37183'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2009-38/'}, {'name': '36069', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/36069'}, {'name': 'ADV-2009-3375', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/3375'}, {'name': 'roxio-image-code-execution(54496)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/54496'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1566?


Explain the CVE ID: What does the identifier CVE-2009-1567 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1567.

Multiple stack-based buffer overflows in the Lateral Arts Photobox uploader ActiveX control 1.x before 1.3, and 2.2.0.6, allow remote attackers to execute arbitrary code via a long URL string for the (1) LogURL, (2) ConnectURL, (3) SkinURL, (4) AlbumCreateURL, (5) ErrorURL, or (6) httpsinglehost property value.


Provide references for further information: Can you share references or external links related to CVE-2009-1567?

{'name': '37187', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/37187'}, {'name': '37492', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/37492'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2009-41/'}, {'name': 'ADV-2009-3377', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/3377'}, {'name': '37138', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/37138'}, {'name': 'ADV-2009-3376', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/3376'}, {'name': '20091202 Secunia Research: Lateral Arts Photobox uploader ActiveX Control Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/508169/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1567?


Explain the CVE ID: What does the identifier CVE-2009-1568 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1568.

Stack-based buffer overflow in ienipp.ocx in Novell iPrint Client 5.30, and possibly other versions before 5.32, allows remote attackers to execute arbitrary code via a long target-frame parameter.


Provide references for further information: Can you share references or external links related to CVE-2009-1568?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://download.novell.com/Download?buildid=29T3EFRky18~'}, {'name': '20091208 Secunia Research: Novell iPrint Client "target-frame" Parameter Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/508289/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2009-40/'}, {'name': 'ADV-2009-3429', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/3429'}, {'name': '37242', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/37242'}, {'name': '37169', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/37169'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1568?


Explain the CVE ID: What does the identifier CVE-2009-1569 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1569.

Multiple stack-based buffer overflows in Novell iPrint Client 4.38, 5.30, and possibly other versions before 5.32 allow remote attackers to execute arbitrary code via vectors related to (1) Date and (2) Time.


Provide references for further information: Can you share references or external links related to CVE-2009-1569?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://download.novell.com/Download?buildid=29T3EFRky18~'}, {'name': '20091208 Secunia Research: Novell iPrint Client Date/Time Parsing Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/508288/100/0/threaded'}, {'name': 'ADV-2009-3429', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/3429'}, {'name': '37242', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/37242'}, {'name': '35004', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35004'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2009-44/'}, {'name': '37169', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/37169'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1569?


Explain the CVE ID: What does the identifier CVE-2009-1570 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1570.

Integer overflow in the ReadImage function in plug-ins/file-bmp/bmp-read.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a BMP file with crafted width and height values that trigger a heap-based buffer overflow.


Provide references for further information: Can you share references or external links related to CVE-2009-1570?

{'name': 'GLSA-201209-23', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201209-23.xml'}, {'name': 'ADV-2009-3564', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/3564'}, {'name': '37006', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/37006'}, {'name': 'ADV-2009-3228', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/3228'}, {'name': 'RHSA-2011:0837', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-0837.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.gnome.org/cgit/gimp/commit/?h=gimp-2-6&id=df2b0aca2e7cdb95ebfd3454c65aaba0a83e9bbe'}, {'name': 'RHSA-2011:0838', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-0838.html'}, {'name': 'SUSE-SR:2010:009', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.html'}, {'name': 'gimp-readimage-bo(54254)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/54254'}, {'name': 'oval:org.mitre.oval:def:8290', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8290'}, {'name': '37232', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/37232'}, {'name': '50737', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/50737'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2009-42/'}, {'name': 'ADV-2010-1021', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1021'}, {'name': '20091112 Secunia Research: Gimp BMP Image Parsing Integer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/507813/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.gnome.org/show_bug.cgi?id=600484'}, {'name': '59930', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/59930'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1570?


Explain the CVE ID: What does the identifier CVE-2009-1571 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1571.

Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in low-memory situations.


Provide references for further information: Can you share references or external links related to CVE-2009-1571?

{'name': 'USN-895-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-895-1'}, {'name': 'RHSA-2010:0153', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2010-0153.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2009-45/'}, {'name': '38847', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38847'}, {'name': 'SUSE-SA:2010:015', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.html'}, {'name': 'RHSA-2010:0113', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2010-0113.html'}, {'name': 'MDVSA-2010:051', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2010:051'}, {'name': 'MDVSA-2010:042', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2010:042'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/2010/mfsa2010-03.html'}, {'name': 'FEDORA-2010-1936', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035367.html'}, {'name': 'RHSA-2010:0112', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2010-0112.html'}, {'name': 'ADV-2010-0650', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0650'}, {'name': 'FEDORA-2010-1932', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035346.html'}, {'name': 'oval:org.mitre.oval:def:11227', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11227'}, {'name': '38770', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38770'}, {'name': 'mozilla-htmlparser-code-exec(56361)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56361'}, {'name': 'DSA-1999', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2010/dsa-1999'}, {'name': 'RHSA-2010:0154', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2010-0154.html'}, {'name': 'FEDORA-2010-1727', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035426.html'}, {'name': '38772', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38772'}, {'name': 'USN-896-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-896-1'}, {'name': 'ADV-2010-0405', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0405'}, {'name': '37242', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/37242'}, {'name': 'oval:org.mitre.oval:def:8615', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8615'}, {'name': 'FEDORA-2010-3230', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036097.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=526500'}, {'name': 'FEDORA-2010-3267', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036132.html'}, {'name': '20100218 Secunia Research: Mozilla Firefox Memory Corruption Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/509585/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1571?


Explain the CVE ID: What does the identifier CVE-2009-1572 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1572.

The BGP daemon (bgpd) in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service (crash) via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error.


Provide references for further information: Can you share references or external links related to CVE-2009-1572?

{'name': '54200', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/54200'}, {'name': '35203', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35203'}, {'name': '34999', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34999'}, {'name': 'MDVSA-2009:109', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2009:109'}, {'name': '1022164', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1022164'}, {'name': 'USN-775-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/usn-775-1'}, {'name': '[oss-security] 20090501 CVE request (sort of): Quagga BGP crasher', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2009/05/01/1'}, {'name': '[quagga-dev] 20090203 [quagga-dev 6391]  [PATCH] BGP 4-byte ASN bug fixes', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=quagga-dev&m=123364779626078&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://thread.gmane.org/gmane.network.quagga.devel/6513'}, {'name': 'DSA-1788', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2009/dsa-1788'}, {'name': 'quagga-systemnumber-dos(50317)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/50317'}, {'name': '35685', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35685'}, {'name': 'FEDORA-2009-5324', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01107.html'}, {'name': '35061', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35061'}, {'name': 'SUSE-SR:2009:012', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526311'}, {'name': 'FEDORA-2009-5284', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01037.html'}, {'name': '34817', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34817'}, {'name': '[oss-security] 20090501 Re: CVE request (sort of): Quagga BGP crasher', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2009/05/01/2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1572?


Explain the CVE ID: What does the identifier CVE-2009-1573 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1573.

xvfb-run 1.6.1 in Debian GNU/Linux, Ubuntu, Fedora 10, and possibly other operating systems place the magic cookie (MCOOKIE) on the command line, which allows local users to gain privileges by listing the process and its arguments.


Provide references for further information: Can you share references or external links related to CVE-2009-1573?

{'name': '[oss-security] 20090505 CVE id request: Debian/Ubuntu specific issue in xvfb-run (xorg)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2009/05/05/2'}, {'name': '[oss-security] 20090505 Re: CVE id request: Debian/Ubuntu specific issue in xvfb-run (xorg)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2009/05/05/4'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526678'}, {'name': '39834', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39834'}, {'name': '34828', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34828'}, {'name': 'xvfbrun-magiccookie-info-disclosure(50348)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/50348'}, {'name': 'ADV-2010-1185', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1185'}, {'name': 'USN-939-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-939-1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1573?


Explain the CVE ID: What does the identifier CVE-2009-1574 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1574.

racoon/isakmp_frag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denial of service (crash) via crafted fragmented packets without a payload, which triggers a NULL pointer dereference.


Provide references for further information: Can you share references or external links related to CVE-2009-1574?

{'name': 'ipsectools-isakmpfrag-dos(50412)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/50412'}, {'name': 'USN-785-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-785-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?group_id=74601&release_id=677611'}, {'name': '35159', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35159'}, {'name': 'FEDORA-2009-4394', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00789.html'}, {'name': '[oss-security] 20090429 ipsec-tools 0.7.2', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2009/04/29/6'}, {'name': '34765', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34765'}, {'name': 'RHSA-2009:1036', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2009-1036.html'}, {'name': '35113', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35113'}, {'name': 'oval:org.mitre.oval:def:9624', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9624'}, {'name': '35404', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35404'}, {'name': '[oss-security] 20090504 Re: ipsec-tools 0.7.2', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2009/05/04/3'}, {'name': '35212', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35212'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=497990'}, {'name': 'APPLE-SA-2010-12-16-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2010//Dec/msg00001.html'}, {'name': 'GLSA-200905-03', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200905-03.xml'}, {'name': '35685', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35685'}, {'name': 'FEDORA-2009-4298', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00746.html'}, {'name': 'SUSE-SR:2009:012', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4298'}, {'name': 'ADV-2009-3184', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/3184'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705'}, {'name': '35153', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35153'}, {'name': 'FEDORA-2009-4291', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00725.html'}, {'name': 'APPLE-SA-2009-11-09-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html'}, {'name': 'DSA-1804', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2009/dsa-1804'}, {'name': 'MDVSA-2009:112', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2009:112'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT3937'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1574?


Explain the CVE ID: What does the identifier CVE-2009-1575 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1575.

Cross-site scripting (XSS) vulnerability in Drupal 5.x before 5.17 and 6.x before 6.11, as used in vbDrupal before 5.17.0, allows remote attackers to inject arbitrary web script or HTML via crafted UTF-8 byte sequences before the Content-Type meta tag, which are treated as UTF-7 by Internet Explorer 6 and 7.


Provide references for further information: Can you share references or external links related to CVE-2009-1575?

{'name': 'FEDORA-2009-4175', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00108.html'}, {'name': '54152', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/54152'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vbdrupal.org/forum/showthread.php?p=9953#post9953'}, {'name': 'ADV-2009-1216', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/1216'}, {'name': '34980', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34980'}, {'name': 'drupal-utf7-xss(50250)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/50250'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/449078'}, {'name': 'FEDORA-2009-4203', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00133.html'}, {'name': '34950', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34950'}, {'name': '34948', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34948'}, {'name': 'DSA-1792', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2009/dsa-1792'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1575?


Explain the CVE ID: What does the identifier CVE-2009-1576 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1576.

Unspecified vulnerability in Drupal 5.x before 5.17 and 6.x before 6.11, as used in vbDrupal before 5.17.0, allows user-assisted remote attackers to obtain sensitive information by tricking victims into visiting the front page of the site with a crafted URL and causing form data to be sent to an attacker-controlled site, possibly related to multiple / (slash) characters that are not properly handled by includes/bootstrap.inc, as demonstrated using the search box.  NOTE: this vulnerability can be leveraged to conduct cross-site request forgery (CSRF) attacks.


Provide references for further information: Can you share references or external links related to CVE-2009-1576?

{'name': 'FEDORA-2009-4175', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00108.html'}, {'name': '54153', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/54153'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vbdrupal.org/forum/showthread.php?p=9953#post9953'}, {'name': 'ADV-2009-1216', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/1216'}, {'name': '34980', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34980'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/449078'}, {'name': 'FEDORA-2009-4203', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00133.html'}, {'name': '34950', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34950'}, {'name': '34948', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34948'}, {'name': 'DSA-1792', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2009/dsa-1792'}, {'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/files/sa-core-2009-005/SA-CORE-2009-005-5.16.patch'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1576?


Explain the CVE ID: What does the identifier CVE-2009-1577 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1577.

Multiple stack-based buffer overflows in the putstring function in find.c in Cscope before 15.6 allow user-assisted remote attackers to execute arbitrary code via a long (1) function name or (2) symbol in a source-code file.


Provide references for further information: Can you share references or external links related to CVE-2009-1577?

{'name': '[oss-security] 20090506 Re: Old cscope buffer overflow', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2009/05/06/9'}, {'name': 'oval:org.mitre.oval:def:9837', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9837'}, {'name': 'RHSA-2009:1101', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2009-1101.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvs.fedoraproject.org/viewvc/rpms/cscope/devel/cscope-15.5-putstring-overflow.patch'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cscope.cvs.sourceforge.net/viewvc/cscope/cscope/src/find.c?view=log#rev1.19'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cscope.cvs.sourceforge.net/viewvc/cscope/cscope/src/find.c?r1=1.18&r2=1.19'}, {'name': '[oss-security] 20090505 Old cscope buffer overflow', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2009/05/05/1'}, {'name': 'GLSA-200905-02', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200905-02.xml'}, {'name': 'cscope-findc-bo(50366)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/50366'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=499174'}, {'name': '35213', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35213'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=189666'}, {'name': '[oss-security] 20090506 Re: Old cscope buffer overflow', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2009/05/06/10'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1577?


Explain the CVE ID: What does the identifier CVE-2009-1578 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1578.

Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.4.18 and NaSMail before 1.7 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) certain encrypted strings in e-mail headers, related to contrib/decrypt_headers.php; (2) PHP_SELF; and (3) the query string (aka QUERY_STRING).


Provide references for further information: Can you share references or external links related to CVE-2009-1578?

{'name': 'APPLE-SA-2010-06-15-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gna.org/forum/forum.php?forum_id=2146'}, {'name': 'MDVSA-2009:110', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2009:110'}, {'name': '34916', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34916'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/doc/ChangeLog'}, {'name': 'ADV-2010-1481', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1481'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.squirrelmail.org/security/issue/2009-05-09'}, {'name': 'FEDORA-2009-4870', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00566.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13670'}, {'name': '35140', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35140'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://download.gna.org/nasmail/nasmail-1.7.zip'}, {'name': '60468', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/60468'}, {'name': 'FEDORA-2009-4880', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00577.html'}, {'name': 'oval:org.mitre.oval:def:11624', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11624'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4188'}, {'name': 'squirrelmail-phpself-xss(50459)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/50459'}, {'name': '40220', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/40220'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13672'}, {'name': 'ADV-2009-1296', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/1296'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/contrib/decrypt_headers.php?r1=13672&r2=13671&pathrev=13672'}, {'name': '35259', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35259'}, {'name': '35052', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35052'}, {'name': 'squirrelmail-decryptheaders-xss(50460)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/50460'}, {'name': 'FEDORA-2009-4875', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00572.html'}, {'name': 'RHSA-2009:1066', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2009-1066.html'}, {'name': '37415', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/37415'}, {'name': '35073', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35073'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/functions/global.php?r1=13670&r2=13669&pathrev=13670'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.squirrelmail.org/security/issue/2009-05-08'}, {'name': 'ADV-2009-3315', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/3315'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=500363'}, {'name': 'DSA-1802', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2009/dsa-1802'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1578?


Explain the CVE ID: What does the identifier CVE-2009-1579 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1579.

The map_yp_alias function in functions/imap_general.php in SquirrelMail before 1.4.18 and NaSMail before 1.7 allows remote attackers to execute arbitrary commands via shell metacharacters in a username string that is used by the ypmatch program.


Provide references for further information: Can you share references or external links related to CVE-2009-1579?

{'name': 'APPLE-SA-2010-06-15-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html'}, {'name': 'oval:org.mitre.oval:def:10986', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10986'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/functions/imap_general.php?r1=13674&r2=13673&pathrev=13674'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gna.org/forum/forum.php?forum_id=2146'}, {'name': 'MDVSA-2009:110', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2009:110'}, {'name': '34916', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34916'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/doc/ChangeLog'}, {'name': 'ADV-2010-1481', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1481'}, {'name': 'FEDORA-2009-4870', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00566.html'}, {'name': '35140', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35140'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://download.gna.org/nasmail/nasmail-1.7.zip'}, {'name': 'FEDORA-2009-4880', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00577.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=500360'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4188'}, {'name': '40220', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/40220'}, {'name': 'ADV-2009-1296', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/1296'}, {'name': '35259', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35259'}, {'name': '35052', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35052'}, {'name': 'FEDORA-2009-4875', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00572.html'}, {'name': 'squirrelmail-mapypalias-code-execution(50461)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/50461'}, {'name': 'RHSA-2009:1066', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2009-1066.html'}, {'name': '37415', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/37415'}, {'name': '35073', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35073'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13674'}, {'name': 'ADV-2009-3315', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/3315'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.squirrelmail.org/security/issue/2009-05-10'}, {'name': 'DSA-1802', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2009/dsa-1802'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1579?


Explain the CVE ID: What does the identifier CVE-2009-1580 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1580.

Session fixation vulnerability in SquirrelMail before 1.4.18 allows remote attackers to hijack web sessions via a crafted cookie.


Provide references for further information: Can you share references or external links related to CVE-2009-1580?

{'name': 'APPLE-SA-2010-06-15-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html'}, {'name': 'MDVSA-2009:110', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2009:110'}, {'name': '34916', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34916'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/doc/ChangeLog'}, {'name': 'ADV-2010-1481', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1481'}, {'name': 'FEDORA-2009-4870', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00566.html'}, {'name': '35140', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35140'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13676'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=500358'}, {'name': 'FEDORA-2009-4880', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00577.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4188'}, {'name': '40220', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/40220'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.squirrelmail.org/security/issue/2009-05-11'}, {'name': 'ADV-2009-1296', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/1296'}, {'name': '35052', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35052'}, {'name': 'FEDORA-2009-4875', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00572.html'}, {'name': '35073', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35073'}, {'name': 'squirrelmail-baseuri-session-hijacking(50462)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/50462'}, {'name': 'oval:org.mitre.oval:def:10107', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10107'}, {'name': 'DSA-1802', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2009/dsa-1802'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1580?


Explain the CVE ID: What does the identifier CVE-2009-1581 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1581.

functions/mime.php in SquirrelMail before 1.4.18 does not protect the application's content from Cascading Style Sheets (CSS) positioning in HTML e-mail messages, which allows remote attackers to spoof the user interface, and conduct cross-site scripting (XSS) and phishing attacks, via a crafted message.


Provide references for further information: Can you share references or external links related to CVE-2009-1581?

{'name': 'APPLE-SA-2010-06-15-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=500356'}, {'name': 'MDVSA-2009:110', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2009:110'}, {'name': '34916', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34916'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/doc/ChangeLog'}, {'name': 'ADV-2010-1481', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1481'}, {'name': 'oval:org.mitre.oval:def:10441', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10441'}, {'name': 'FEDORA-2009-4870', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00566.html'}, {'name': '35140', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35140'}, {'name': 'FEDORA-2009-4880', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00577.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.squirrelmail.org/security/issue/2009-05-12'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/functions/mime.php?r1=13667&r2=13666&pathrev=13667'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4188'}, {'name': 'squirrelmail-css-xss(50463)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/50463'}, {'name': '40220', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/40220'}, {'name': 'ADV-2009-1296', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/1296'}, {'name': '35259', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35259'}, {'name': '35052', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35052'}, {'name': 'FEDORA-2009-4875', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00572.html'}, {'name': 'RHSA-2009:1066', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2009-1066.html'}, {'name': '35073', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35073'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13667'}, {'name': 'DSA-1802', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2009/dsa-1802'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1581?


Explain the CVE ID: What does the identifier CVE-2009-1582 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1582.

Million Dollar Text Links 1.0 does not properly restrict administrator access to admin.home.php, which allows remote attackers to bypass intended restrictions and gain privileges via a direct request to admin.home.php after visiting admin.php.


Provide references for further information: Can you share references or external links related to CVE-2009-1582?

{'name': '8605', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8605'}, {'name': '54204', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/54204'}, {'name': '34809', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34809'}, {'name': '34994', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34994'}, {'name': 'milliondollar-adminhome-auth-bypass(50306)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/50306'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1582?


Explain the CVE ID: What does the identifier CVE-2009-1583 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1583.

Multiple cross-site scripting (XSS) vulnerabilities in TemaTres 1.0.3 and 1.031 allow remote attackers to inject arbitrary web script or HTML via the (1) search form; (2) _expresion_de_busqueda, (3) letra, (4) estado_id, and (5) tema parameters to index.php; the (6) PATH_INFO to index.php; (7) unspecified parameters when editing a term as specified by the edit_id and tema parameters to index.php; and the (7) y, (8) ord, and (9) m parameters to sobre.php.


Provide references for further information: Can you share references or external links related to CVE-2009-1583?

{'name': '8615', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8615'}, {'name': '54247', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/54247'}, {'name': '34830', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34830'}, {'name': '34990', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34990'}, {'name': 'tematres-term-xss(50343)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/50343'}, {'name': '20090505 MULTIPLE REMOTE VULNERABILITIES--TemaTres 1.0.3-->', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/503252/100/0/threaded'}, {'name': '34983', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34983'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1583?


Explain the CVE ID: What does the identifier CVE-2009-1584 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1584.

Multiple SQL injection vulnerabilities in TemaTres 1.0.3 and 1.031, when magic_quotes_gpc is disabled, allow remote attackers or remote authenticated users to execute arbitrary SQL commands via the (1) mail, (2) password, and (3) letra parameters to index.php; (4) y and (5) m parameters to sobre.php; and the (6) dcTema, (7) madsTema, (8) zthesTema, (9) skosTema, and (10) xtmTema parameters to xml.php.


Provide references for further information: Can you share references or external links related to CVE-2009-1584?

{'name': '20090505 BLIND SQL INJECTION EXPLOIT--TemaTres 1.0.3-->', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/503256'}, {'name': '8615', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8615'}, {'name': '54246', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/54246'}, {'name': '34830', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34830'}, {'name': '54245', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/54245'}, {'name': '8616', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8616'}, {'name': '20090505 MULTIPLE REMOTE VULNERABILITIES--TemaTres 1.0.3-->', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/503252/100/0/threaded'}, {'name': '34983', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34983'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1584?


Explain the CVE ID: What does the identifier CVE-2009-1585 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1585.

Multiple SQL injection vulnerabilities in TemaTres 1.031, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) id_correo_electronico and (2) id_password parameters to login.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2009-1585?

{'name': '54244', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/54244'}, {'name': '34983', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34983'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1585?


Explain the CVE ID: What does the identifier CVE-2009-1586 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1586.

Stack-based buffer overflow in the NZB importer feature in GrabIt 1.7.2 Beta 3 and earlier allows remote attackers to execute arbitrary code via a crafted DTD reference in a DOCTYPE element in an NZB file.


Provide references for further information: Can you share references or external links related to CVE-2009-1586?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.shemes.com/index.php?p=whatsnew'}, {'name': 'grabit-nzb-bo(50310)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/50310'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blog.teusink.net/2009/05/grabit-172-beta-3-nzb-file-parsing.html'}, {'name': '20090503 Grabit <= 1.7.2 beta 3 NZB file parsing stack overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/503184/100/0/threaded'}, {'name': '1022161', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1022161'}, {'name': '8612', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8612'}, {'name': '34807', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34807'}, {'name': '34893', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34893'}, {'name': '54205', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/54205'}, {'name': 'ADV-2009-1243', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/1243'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1586?


Explain the CVE ID: What does the identifier CVE-2009-1587 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1587.

index.php in PHP Site Lock 2.0 allows remote attackers to bypass authentication and obtain administrative access by setting the login_id, group_id, login_name, user_id, and user_type cookies to certain values.


Provide references for further information: Can you share references or external links related to CVE-2009-1587?

{'name': '34995', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34995'}, {'name': '8604', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8604'}, {'name': '54203', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/54203'}, {'name': 'phpsitelock-index-security-bypass(50304)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/50304'}, {'name': 'ADV-2009-1249', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/1249'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1587?


Explain the CVE ID: What does the identifier CVE-2009-1588 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1588.

Cross-site scripting (XSS) vulnerability in CGI RESCUE MiniBBS 8t before 8.95t, 8 before 8.95, 9 before 9.08, and 10 before 10.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2009-1588?

{'name': 'JVN#11396739', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN11396739/index.html'}, {'name': 'JVNDB-2009-000022', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000022.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20081213132937'}, {'name': 'minibbs-unspecified-xss(50219)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/50219'}, {'name': '34887', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34887'}, {'name': '34718', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34718'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1588?


Explain the CVE ID: What does the identifier CVE-2009-1589 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1589.

Unspecified vulnerability in CGI RESCUE MiniBBS22 before 1.01 allows remote attackers to send email to arbitrary recipients via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2009-1589?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20081213132937'}, {'name': 'JVNDB-2009-000021', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000021.html'}, {'name': 'JVN#36982346', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN36982346/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1589?


Explain the CVE ID: What does the identifier CVE-2009-1590 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1590.

Unspecified vulnerability in CGI RESCUE FORM2MAIL before 1.42 allows remote attackers to send email to arbitrary recipients via a web form.


Provide references for further information: Can you share references or external links related to CVE-2009-1590?

{'name': 'JVNDB-2009-000023', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000023.html'}, {'name': '54097', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/54097'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20081213132937'}, {'name': 'JVN#76370393', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN76370393/index.html'}, {'name': '34869', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34869'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1590?


Explain the CVE ID: What does the identifier CVE-2009-1591 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1591.

CRLF injection vulnerability in CGI RESCUE Web Mailer before 1.04 allows remote attackers to inject arbitrary HTTP headers, and conduct cross-site scripting (XSS) or HTTP response splitting attacks, via CRLF sequences in an unspecified web form.


Provide references for further information: Can you share references or external links related to CVE-2009-1591?

{'name': 'JVN#28020230', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN28020230/index.html'}, {'name': '34862', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34862'}, {'name': '35047', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/35047'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20090209180123'}, {'name': 'JVNDB-2009-000024', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000024.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1591?


Explain the CVE ID: What does the identifier CVE-2009-1592 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1592.

Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long banner.  NOTE: this might overlap CVE-2003-1368.


Provide references for further information: Can you share references or external links related to CVE-2009-1592?

{'name': '34822', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34822'}, {'name': '34993', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34993'}, {'name': '32bit-cwd-banner-bo(50337)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/50337'}, {'name': 'ADV-2009-1263', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/1263'}, {'name': '8611', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8611'}, {'name': '8614', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8614'}, {'name': '54219', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/54219'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1592?


Explain the CVE ID: What does the identifier CVE-2009-1593 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1593.

Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not properly implement the "negative model," which allows remote attackers to conduct cross-site scripting (XSS) attacks via a modified end tag of a SCRIPT element.


Provide references for further information: Can you share references or external links related to CVE-2009-1593?

{'tags': ['x_refsource_MISC'], 'url': 'http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt'}, {'name': '35053', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/35053'}, {'name': '20090520 Armorlogic Profense Web Application Firewall 2.4 multiple vulnerabilities.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/503649/100/0/threaded'}, {'name': "[websecurity] 20090519 [WEB SECURITY] Trustwave's SpiderLabs Security Advisory TWSL2009-001 and EnableSecurity Advisory ES-20090500", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.webappsec.org/lists/websecurity/archive/2009-05/msg00040.html'}, {'name': 'profense-blacklist-security-bypass(50663)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/50663'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1593?


Explain the CVE ID: What does the identifier CVE-2009-1594 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1594.

Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not properly implement the "positive model," which allows remote attackers to bypass certain protection mechanisms via a %0A (encoded newline), as demonstrated by a %0A in a cross-site scripting (XSS) attack URL.


Provide references for further information: Can you share references or external links related to CVE-2009-1594?

{'name': 'profense-whitelist-security-bypass(50662)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/50662'}, {'tags': ['x_refsource_MISC'], 'url': 'http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt'}, {'name': '35053', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/35053'}, {'name': '20090520 Armorlogic Profense Web Application Firewall 2.4 multiple vulnerabilities.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/503649/100/0/threaded'}, {'name': "[websecurity] 20090519 [WEB SECURITY] Trustwave's SpiderLabs Security Advisory TWSL2009-001 and EnableSecurity Advisory ES-20090500", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.webappsec.org/lists/websecurity/archive/2009-05/msg00040.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1594?


Explain the CVE ID: What does the identifier CVE-2009-1595 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1595.

The jabber:iq:auth implementation in IQAuthHandler.java in Ignite Realtime Openfire before 3.6.4 allows remote authenticated users to change the passwords of arbitrary accounts via a modified username element in a passwd_change action.


Provide references for further information: Can you share references or external links related to CVE-2009-1595?

{'name': 'ADV-2009-1237', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/1237'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.igniterealtime.org/builds/openfire/docs/latest/changelog.html'}, {'name': '54189', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/54189'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.igniterealtime.org/community/message/190280'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.igniterealtime.org/issues/browse/JM-1531'}, {'name': '34804', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34804'}, {'name': '34976', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34976'}, {'name': 'openfire-jabberiqauth-security-bypass(50292)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/50292'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1595?


Explain the CVE ID: What does the identifier CVE-2009-1596 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1596.

Ignite Realtime Openfire before 3.6.5 does not properly implement the register.password (aka canChangePassword) console configuration setting, which allows remote authenticated users to bypass intended policy and change their own passwords via a passwd_change IQ packet.


Provide references for further information: Can you share references or external links related to CVE-2009-1596?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.igniterealtime.org/community/message/190280'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.igniterealtime.org/issues/browse/JM-1532'}, {'name': '34984', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34984'}, {'name': 'openfire-nopassword-security-bypass(50291)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/50291'}, {'name': '34804', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34804'}, {'name': '54189', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/54189'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1596?


Explain the CVE ID: What does the identifier CVE-2009-1597 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1597.

Mozilla Firefox executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline PDF file, which might allow remote attackers to bypass intended Adobe Acrobat JavaScript restrictions on accessing the document object, as demonstrated by a web site that permits PDF uploads by untrusted users, and therefore has a shared document.domain between the web site and this javascript: URI.  NOTE: the researcher reports that Adobe's position is "a PDF file is active content."


Provide references for further information: Can you share references or external links related to CVE-2009-1597?

{'tags': ['x_refsource_MISC'], 'url': 'http://secniche.org/papers/SNS_09_03_PDF_Silent_Form_Re_Purp_Attack.pdf'}, {'name': '20090503 [SecNiche WhitePaper ] - PDF Silent HTTP Form Repurposing Attacks', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/503183/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1597?


Explain the CVE ID: What does the identifier CVE-2009-1598 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1598.

Google Chrome executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline PDF file, which might allow remote attackers to bypass intended Adobe Acrobat JavaScript restrictions on accessing the document object, as demonstrated by a web site that permits PDF uploads by untrusted users, and therefore has a shared document.domain between the web site and this javascript: URI.  NOTE: the researcher reports that Adobe's position is "a PDF file is active content."


Provide references for further information: Can you share references or external links related to CVE-2009-1598?


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1598?


Explain the CVE ID: What does the identifier CVE-2009-1599 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1599.

Opera executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline PDF file, which might allow remote attackers to bypass intended Adobe Acrobat JavaScript restrictions on accessing the document object, as demonstrated by a web site that permits PDF uploads by untrusted users, and therefore has a shared document.domain between the web site and this javascript: URI.  NOTE: the researcher reports that Adobe's position is "a PDF file is active content."


Provide references for further information: Can you share references or external links related to CVE-2009-1599?


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1599?


Explain the CVE ID: What does the identifier CVE-2009-1600 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1600.

Apple Safari executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline PDF file, which might allow remote attackers to bypass intended Adobe Acrobat JavaScript restrictions on accessing the document object, as demonstrated by a web site that permits PDF uploads by untrusted users, and therefore has a shared document.domain between the web site and this javascript: URI.  NOTE: the researcher reports that Adobe's position is "a PDF file is active content."


Provide references for further information: Can you share references or external links related to CVE-2009-1600?


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1600?


Explain the CVE ID: What does the identifier CVE-2009-1601 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1601.

The Ubuntu clamav-milter.init script in clamav-milter before 0.95.1+dfsg-1ubuntu1.2 in Ubuntu 9.04 sets the ownership of the current working directory to the clamav account, which might allow local users to bypass intended access restrictions via read or write operations involving this directory.


Provide references for further information: Can you share references or external links related to CVE-2009-1601?

{'name': 'USN-770-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-770-1'}, {'name': 'clamav-clamavmilter-security-bypass(50311)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/50311'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://launchpad.net/bugs/365823'}, {'name': '35000', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35000'}, {'name': '34818', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34818'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1601?


Explain the CVE ID: What does the identifier CVE-2009-1602 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1602.

Pablo Software Solutions Quick 'n Easy Mail Server 3.3 allows remote attackers to cause a denial of service (daemon outage or CPU consumption) via multiple long SMTP commands, as demonstrated by HELO commands.


Provide references for further information: Can you share references or external links related to CVE-2009-1602?

{'name': '54215', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/54215'}, {'name': '8606', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8606'}, {'name': '34814', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34814'}, {'name': 'quickneasymailserver-helo-dos(50299)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/50299'}, {'name': '34992', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34992'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1602?


Explain the CVE ID: What does the identifier CVE-2009-1603 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1603.

src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS#11 modules, generates RSA keys with incorrect public exponents, which allows attackers to read the cleartext form of messages that were intended to be encrypted.


Provide references for further information: Can you share references or external links related to CVE-2009-1603?

{'name': 'ADV-2009-1295', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/1295'}, {'name': '35293', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35293'}, {'name': 'FEDORA-2009-4919', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01420.html'}, {'name': '[oss-security] 20090508 OpenSC 0.11.8 released with security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2009/05/08/1'}, {'name': 'FEDORA-2009-4967', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00097.html'}, {'name': 'FEDORA-2009-4928', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00095.html'}, {'name': '36074', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/36074'}, {'name': 'MDVSA-2009:123', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2009:123'}, {'name': 'FEDORA-2009-4883', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01432.html'}, {'name': '35035', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35035'}, {'name': '[opensc-announce] 20090508 OpenSC 0.11.8 released with security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.opensc-project.org/pipermail/opensc-announce/2009-May/000025.html'}, {'name': 'GLSA-200908-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200908-01.xml'}, {'name': '35309', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35309'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1603?


Explain the CVE ID: What does the identifier CVE-2009-1604 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1604.

Unspecified vulnerability in LimeSurvey before 1.82 allows remote attackers to execute commands and obtain sensitive data via unknown attack vectors related to /admin/remotecontrol/.


Provide references for further information: Can you share references or external links related to CVE-2009-1604?

{'name': '34785', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34785'}, {'name': 'ADV-2009-1219', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/1219'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.limesurvey.org/content/view/169/1/lang%2Cen/'}, {'name': '34946', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34946'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1604?


Explain the CVE ID: What does the identifier CVE-2009-1605 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1605.

Heap-based buffer overflow in the loadexponentialfunc function in mupdf/pdf_function.c in MuPDF in the mupdf-20090223-win32 package, as used in SumatraPDF 0.9.3 and earlier, allows remote attackers to execute arbitrary code via a crafted PDF file.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2009-1605?

{'name': '34916', 'tags': ['third-party-advisory'], 'url': 'http://secunia.com/advisories/34916'}, {'name': 'ADV-2009-1185', 'tags': ['vdb-entry'], 'url': 'http://www.vupen.com/english/advisories/2009/1185'}, {'name': 'ADV-2009-1186', 'tags': ['vdb-entry'], 'url': 'http://www.vupen.com/english/advisories/2009/1186'}, {'name': '20090424 SumatraPDF <= 0.9.3 Heap Overflow PoC', 'tags': ['mailing-list'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0258.html'}, {'url': 'https://bugs.ghostscript.com/show_bug.cgi?id=690555'}, {'url': 'https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=451373e028f82fa2f1cc2a6a669df31d85c877bd'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1605?


Explain the CVE ID: What does the identifier CVE-2009-1606 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1606.

Multiple stack-based and heap-based buffer overflows in Dafolo DafoloControl ActiveX control (DafoloFFControl.dll) 1.108.6.195 allow remote attackers to execute arbitrary code via long (1) baseurl, (2) kommune, (3) felter, (4) afdeling, (5) Flags, (6) HelpURL, (7) caburl, or (8) filename properties; or (9) a long argument to the Open method. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2009-1606?

{'name': '35017', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35017'}, {'name': 'dafolo-helpurl-caburl-bo(50422)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/50422'}, {'name': 'dafolo-stringparsing-bo(50421)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/50421'}, {'name': 'dafolo-baseurl-bo(50420)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/50420'}, {'name': '34900', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34900'}, {'name': 'dafolo-filenames-bo(50423)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/50423'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1606?


Explain the CVE ID: What does the identifier CVE-2009-1607 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1607.

Cross-site scripting (XSS) vulnerability in the administrator panel in phpForm.net LinkBase 2.0 allows remote attackers to inject arbitrary web script or HTML via the username in a registration, which is not properly handled when the administrator accesses the Users menu.


Provide references for further information: Can you share references or external links related to CVE-2009-1607?

{'name': 'linkbase-usersmenu-xss(50338)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/50338'}, {'name': '34844', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34844'}, {'name': '8618', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8618'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1607?


Explain the CVE ID: What does the identifier CVE-2009-1608 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1608.

Multiple buffer overflows in Microchip MPLAB IDE 8.30 and possibly earlier versions allow user-assisted remote attackers to execute arbitrary code via a .MCP project file with long (1) FILE_INFO, (2) CAT_FILTERS, and possibly other fields.


Provide references for further information: Can you share references or external links related to CVE-2009-1608?

{'name': '54370', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/54370'}, {'name': 'mplabide-catfilters-bo(50419)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/50419'}, {'name': '35054', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35054'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security.bkis.vn/?p=654'}, {'name': 'mplabide-fileinfo-bo(50418)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/50418'}, {'name': '34897', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34897'}, {'name': '20090511 [Bkis-08-2009] Microchip MPLAB IDE Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/503400/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1608?


Explain the CVE ID: What does the identifier CVE-2009-1609 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1609.

Unrestricted file upload vulnerability in admin/uploadform.asp in Battle Blog 1.25 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file.


Provide references for further information: Can you share references or external links related to CVE-2009-1609?

{'name': 'battleblog-uploadform-file-upload(50400)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/50400'}, {'name': '35023', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35023'}, {'name': '34887', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34887'}, {'name': 'ADV-2009-1280', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/1280'}, {'name': '8647', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8647'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1609?


Explain the CVE ID: What does the identifier CVE-2009-1610 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1610.

admin/changepassword.php in Job Script Job Board Software 2.0 allows remote attackers to change the administrator password and gain administrator privileges via a direct request.


Provide references for further information: Can you share references or external links related to CVE-2009-1610?

{'name': '35029', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35029'}, {'name': '8639', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8639'}, {'name': '34874', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34874'}, {'name': '54281', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/54281'}, {'name': 'jobscript-changepassword-security-bypass(50380)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/50380'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1610?


Explain the CVE ID: What does the identifier CVE-2009-1611 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1611.

Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long 257 reply to a CWD command.


Provide references for further information: Can you share references or external links related to CVE-2009-1611?

{'name': '34838', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34838'}, {'name': '34822', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34822'}, {'name': '8621', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8621'}, {'name': 'ADV-2009-1263', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/1263'}, {'name': '8613', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8613'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1611?


Explain the CVE ID: What does the identifier CVE-2009-1612 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1612.

Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote attackers to execute arbitrary code via a long argument to the OnBeforeVideoDownload method, as exploited in the wild in April and May 2009. NOTE: some of these details are obtained from third party information. NOTE: it was later reported that 3.09.04.17 and earlier are also affected.


Provide references for further information: Can you share references or external links related to CVE-2009-1612?

{'name': '8579', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8579'}, {'name': '34789', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34789'}, {'name': '34944', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34944'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.cisrt.org/enblog/read.php?245'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1612?


Explain the CVE ID: What does the identifier CVE-2009-1613 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1613.

Multiple SQL injection vulnerabilities in leap.php in Leap CMS 0.1.4, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) searchterm or (2) email parameter.


Provide references for further information: Can you share references or external links related to CVE-2009-1613?

{'name': '8576', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8576'}, {'name': '8577', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8577'}, {'name': '34943', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34943'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1613?


Explain the CVE ID: What does the identifier CVE-2009-1614 mean in the context of cybersecurity?