Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1218?


Explain the CVE ID: What does the identifier CVE-2009-1219 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1219.

Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allows remote attackers to cause a denial of service (daemon crash) via multiple requests to the default URI with alphabetic characters in the tzid parameter.


Provide references for further information: Can you share references or external links related to CVE-2009-1219?

{'name': 'ADV-2009-0905', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0905'}, {'name': '256228', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-256228-1'}, {'name': '34150', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34150'}, {'name': '20090331 CORE-2009-0108: Multiple vulnerabilities in Sun Calendar Express Web Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/502320/100/0/threaded'}, {'name': '255008', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-66-255008-1'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.coresecurity.com/content/sun-calendar-express'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1219?


Explain the CVE ID: What does the identifier CVE-2009-1220 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1220.

Cross-site scripting (XSS) vulnerability in +webvpn+/index.html in WebVPN on the Cisco Adaptive Security Appliances (ASA) 5520 with software 7.2(4)30 and earlier 7.2 versions including 7.2(2)22, and 8.0(4)28 and earlier 8.0 versions, when clientless mode is enabled, allows remote attackers to inject arbitrary web script or HTML via the Host HTTP header.


Provide references for further information: Can you share references or external links related to CVE-2009-1220?

{'name': '20090424 RE: Cisco ASA5520 Web VPN Host Header XSS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/502932'}, {'name': '34307', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34307'}, {'name': '1022122', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1022122'}, {'name': 'ADV-2009-1169', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/1169'}, {'name': 'asa5520-webvpn-xss(49528)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49528'}, {'name': '20090331 Cisco ASA5520 Web VPN Host Header XSS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/502313/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://tools.cisco.com/security/center/viewAlert.x?alertId=17950'}, {'name': '20090331 Cisco ASA5520 Web VPN Host Header XSS', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0478.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1220?


Explain the CVE ID: What does the identifier CVE-2009-1222 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1222.

Directory traversal vulnerability in index.php in webEdition 6.0.0.4 and earlier, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the WE_LANGUAGE parameter.


Provide references for further information: Can you share references or external links related to CVE-2009-1222?

{'name': '34323', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34323'}, {'name': '8328', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8328'}, {'name': '20090331 webEdition 6.0.0.4 Local File Inclusion', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/502315/100/0/threaded'}, {'name': 'webedition-index-file-include(49530)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49530'}, {'name': '34518', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34518'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1222?


Explain the CVE ID: What does the identifier CVE-2009-1223 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1223.

aspWebCalendar Free Edition stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for calendar/calendar.mdb.


Provide references for further information: Can you share references or external links related to CVE-2009-1223?

{'name': 'aspwebcalendar-calendar-info-disclosure(49885)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49885'}, {'name': '20090331 aspWebCalendar Free Edition bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/502311/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1223?


Explain the CVE ID: What does the identifier CVE-2009-1224 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1224.

SQL injection vulnerability in vsp-core/pub/themes/bismarck/gamestat.php in vsp stats processor 0.45 allows remote attackers to execute arbitrary SQL commands via the gameID parameter.


Provide references for further information: Can you share references or external links related to CVE-2009-1224?

{'name': '8331', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8331'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1224?


Explain the CVE ID: What does the identifier CVE-2009-1225 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1225.

Cross-site scripting (XSS) vulnerability in index.php in Turnkey Ebook Store 1.1 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a search action.


Provide references for further information: Can you share references or external links related to CVE-2009-1225?

{'tags': ['x_refsource_MISC'], 'url': 'http://packetstorm.linuxsecurity.com/0903-exploits/turnkeyebook-xss.txt'}, {'name': '34533', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34533'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1225?


Explain the CVE ID: What does the identifier CVE-2009-1226 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1226.

core/admin/delete.php in Podcast Generator 1.1 and earlier does not properly restrict access to administrative functions, which allows remote attackers to delete arbitrary files via the file parameter.


Provide references for further information: Can you share references or external links related to CVE-2009-1226?

{'name': '34317', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34317'}, {'name': '34555', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34555'}, {'name': '8324', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8324'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1226?


Explain the CVE ID: What does the identifier CVE-2009-1227 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1227.

NOTE: this issue has been disputed by the vendor.  Buffer overflow in the PKI Web Service in Check Point Firewall-1 PKI Web Service allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) Authorization or (2) Referer HTTP header to TCP port 18624.  NOTE: the vendor has disputed this issue, stating "Check Point Security Alert Team has analyzed this report. We've tried to reproduce the attack on all VPN-1 versions from NG FP2 and above with and without HFAs. The issue was not reproduced. We have conducted a thorough analysis of the relevant code and verified that we are secure against this attack. We consider this attack to pose no risk to Check Point customers."  In addition, the original researcher, whose reliability is unknown as of 20090407, also states that the issue "was discovered during a pen-test where the client would not allow further analysis.


Provide references for further information: Can you share references or external links related to CVE-2009-1227?

{'name': '20090330 Check Point Firewall-1 PKI Web Service HTTP Header Remote Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/502256/100/0/threaded'}, {'name': '8313', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8313'}, {'name': '20090330 Check Point Firewall-1 PKI Web Service HTTP Header Remote Overflow', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0463.html'}, {'name': '34286', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34286'}, {'name': '1021948', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1021948'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1227?


Explain the CVE ID: What does the identifier CVE-2009-1228 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1228.

Cross-site scripting (XSS) vulnerability in register.php in Arcadwy Arcade Script CMS allows remote attackers to inject arbitrary web script or HTML via the username field (user_name parameter).


Provide references for further information: Can you share references or external links related to CVE-2009-1228?

{'name': '34506', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34506'}, {'name': '8296', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8296'}, {'name': '34275', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34275'}, {'name': 'arcadescript-register-xss(49472)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49472'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1228?


Explain the CVE ID: What does the identifier CVE-2009-1229 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1229.

SQL injection vulnerability in Arcadwy Arcade Script allows remote attackers to execute arbitrary SQL commands via the user cookie parameter.


Provide references for further information: Can you share references or external links related to CVE-2009-1229?

{'name': 'arcadescript-user-sql-injection(49500)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49500'}, {'name': '34506', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34506'}, {'name': '34284', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34284'}, {'name': '8304', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8304'}, {'tags': ['x_refsource_MISC'], 'url': 'http://z0rlu.blogspot.com/2009/03/arcadwy-arcade-script-auth-bypass.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1229?


Explain the CVE ID: What does the identifier CVE-2009-1230 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1230.

Static code injection vulnerability in index.php in Podcast Generator 1.1 and earlier allows remote authenticated administrators to inject arbitrary PHP code into config.php via the recent parameter in a config change action.


Provide references for further information: Can you share references or external links related to CVE-2009-1230?

{'name': '8324', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8324'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1230?


Explain the CVE ID: What does the identifier CVE-2009-1231 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1231.

Unspecified vulnerability in the eClient in IBM DB2 Content Manager 8.4.1 before 8.4.1.1 has unknown impact and attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2009-1231?

{'name': '34544', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34544'}, {'name': '34326', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34326'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg27015162'}, {'name': 'ADV-2009-0910', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0910'}, {'name': 'IO08969', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg1IO08969'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1231?


Explain the CVE ID: What does the identifier CVE-2009-1232 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1232.

Mozilla Firefox 3.0.8 and earlier 3.0.x versions allows remote attackers to cause a denial of service (memory corruption) via an XML document composed of a long series of start-tags with no corresponding end-tags. NOTE: it was later reported that 3.0.10 and earlier are also affected.


Provide references for further information: Can you share references or external links related to CVE-2009-1232?

{'name': '34522', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34522'}, {'name': 'firefox-xml-dos(49521)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49521'}, {'tags': ['x_refsource_MISC'], 'url': 'http://websecurity.com.ua/3216/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://milw0rm.com/sploits/2009-Firefox-XUL-0day-PoC.rar'}, {'name': '8306', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8306'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=485941'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1232?


Explain the CVE ID: What does the identifier CVE-2009-1233 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1233.

Apple Safari 3.2.2 and 4 Beta on Windows allows remote attackers to cause a denial of service (application crash) via an XML document containing many nested A elements.


Provide references for further information: Can you share references or external links related to CVE-2009-1233?

{'name': '8325', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8325'}, {'name': 'safari-xml-dos(49527)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49527'}, {'name': '34318', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34318'}, {'name': 'oval:org.mitre.oval:def:5559', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5559'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1233?


Explain the CVE ID: What does the identifier CVE-2009-1234 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1234.

Opera 9.64 allows remote attackers to cause a denial of service (application crash) via an XML document containing a long series of start-tags with no corresponding end-tags.  NOTE: it was later reported that 9.52 is also affected.


Provide references for further information: Can you share references or external links related to CVE-2009-1234?

{'name': '8320', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8320'}, {'name': 'opera-xml-dos(49522)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49522'}, {'tags': ['x_refsource_MISC'], 'url': 'http://websecurity.com.ua/3216/'}, {'name': 'SUSE-SR:2009:015', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html'}, {'name': '34298', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34298'}, {'name': 'oval:org.mitre.oval:def:5432', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5432'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1234?


Explain the CVE ID: What does the identifier CVE-2009-1235 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1235.

XNU 1228.9.59 and earlier on Apple Mac OS X 10.5.6 and earlier does not properly restrict interaction between user space and the HFS IOCTL handler, which allows local users to overwrite kernel memory and gain privileges by attaching an HFS+ disk image and performing certain steps involving HFS_GET_BOOT_INFO fcntl calls.


Provide references for further information: Can you share references or external links related to CVE-2009-1235?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT3757'}, {'name': 'ADV-2009-0822', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0822'}, {'name': '36096', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/36096'}, {'name': '34424', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34424'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.digit-labs.org/files/exploits/xnu-hfs-fcntl-v2.c'}, {'name': 'APPLE-SA-2009-08-05-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.digit-labs.org/files/exploits/xnu-hfs-fcntl-v2.sh'}, {'name': '34203', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34203'}, {'name': '8266', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8266'}, {'name': '1022671', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1022671'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.informationweek.com/news/hardware/mac/showArticle.jhtml?articleID=216401181'}, {'name': 'ADV-2009-2172', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/2172'}, {'name': 'TA09-218A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA09-218A.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1235?


Explain the CVE ID: What does the identifier CVE-2009-1236 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1236.

Heap-based buffer overflow in the AppleTalk networking stack in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allows remote attackers to cause a denial of service (system crash) via a ZIP NOTIFY (aka ZIPOP_NOTIFY) packet that overwrites a certain ifPort structure member.


Provide references for further information: Can you share references or external links related to CVE-2009-1236?

{'name': '34201', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34201'}, {'name': '34424', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34424'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.digit-labs.org/files/exploits/xnu-appletalk-zip.c'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.informationweek.com/news/hardware/mac/showArticle.jhtml?articleID=216401181'}, {'name': '8262', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8262'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1236?


Explain the CVE ID: What does the identifier CVE-2009-1237 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1237.

Multiple memory leaks in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allow local users to cause a denial of service (kernel memory consumption) via a crafted (1) SYS_add_profil or (2) SYS___mac_getfsstat system call.


Provide references for further information: Can you share references or external links related to CVE-2009-1237?

{'name': '8264', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8264'}, {'name': '34202', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34202'}, {'name': '8263', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8263'}, {'name': '34424', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34424'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.informationweek.com/news/hardware/mac/showArticle.jhtml?articleID=216401181'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.digit-labs.org/files/exploits/xnu-macfsstat-leak.c'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.digit-labs.org/files/exploits/xnu-profil-leak.c'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1237?


Explain the CVE ID: What does the identifier CVE-2009-1238 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1238.

Race condition in the HFS vfs sysctl interface in XNU 1228.8.20 and earlier on Apple Mac OS X 10.5.6 and earlier allows local users to cause a denial of service (kernel memory corruption) by simultaneously executing the same HFS_SET_PKG_EXTENSIONS code path in multiple threads, which is problematic because of lack of mutex locking for an unspecified global variable.


Provide references for further information: Can you share references or external links related to CVE-2009-1238?

{'name': '8265', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8265'}, {'name': '34202', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34202'}, {'name': '34424', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34424'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.digit-labs.org/files/exploits/xnu-vfssysctl-dos.c'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.informationweek.com/news/hardware/mac/showArticle.jhtml?articleID=216401181'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1238?


Explain the CVE ID: What does the identifier CVE-2009-1239 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1239.

IBM DB2 9.1 before FP7 returns incorrect query results in certain situations related to the order of application of an INNER JOIN predicate and an OUTER JOIN predicate, which might allow attackers to obtain sensitive information via a crafted query.


Provide references for further information: Can you share references or external links related to CVE-2009-1239?

{'name': 'db2-predicate-information-disclosure(49864)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49864'}, {'name': 'JR31886', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1JR31886'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21381257'}, {'name': 'ADV-2009-0912', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0912'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1239?


Explain the CVE ID: What does the identifier CVE-2009-1240 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1240.

Unspecified vulnerability in the IBM Proventia engine 4.9.0.0.44 20081231, as used in IBM Proventia Network Mail Security System, Network Mail Security System Virtual Appliance, Desktop Endpoint Security, Network Multi-Function Security (MFS), and possibly other products, allows remote attackers to bypass detection of malware via a modified RAR archive.


Provide references for further information: Can you share references or external links related to CVE-2009-1240?

{'name': '20090716 Re: Update: [TZO-06-2009] IBM Proventia - Generic bypass (Limited disclosure - see details)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/504995/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blog.zoller.lu/2009/04/ibm-proventia-evasion-limited-details.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=5417'}, {'name': '34345', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34345'}, {'name': '20090715 Update: [TZO-06-2009] IBM Proventia - Generic bypass (Limited disclosure - see details)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/504987/100/0/threaded'}, {'name': '20090402 [TZO-06-2009] IBM Proventia - Generic bypass (Limited disclosure - see details)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/502369/100/0/threaded'}, {'name': '20090716 Re[2]: Update: [TZO-06-2009] IBM Proventia - Generic bypass (Limited disclosure - see details)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/504992/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1240?


Explain the CVE ID: What does the identifier CVE-2009-1241 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1241.

Unspecified vulnerability in ClamAV before 0.95 allows remote attackers to bypass detection of malware via a modified RAR archive.


Provide references for further information: Can you share references or external links related to CVE-2009-1241?

{'name': 'MDVSA-2009:097', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2009:097'}, {'name': 'ADV-2009-0934', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0934'}, {'name': '34344', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34344'}, {'name': '20090402 [TZO-05-2009] Clamav 0.94 and below - Evasion /bypass', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/502366/100/0/threaded'}, {'name': 'APPLE-SA-2009-09-10-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blog.zoller.lu/2009/04/clamav-094-and-below-evasion-and-bypass.html'}, {'name': '[oss-security] 20090407 Re: CVE request: clamav clamd and clamscan DoS and bypass by malformated archive', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2009/04/07/6'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT3865'}, {'name': '36701', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/36701'}, {'name': 'SUSE-SR:2009:009', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1241?


Explain the CVE ID: What does the identifier CVE-2009-1242 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1242.

The vmx_set_msr function in arch/x86/kvm/vmx.c in the VMX implementation in the KVM subsystem in the Linux kernel before 2.6.29.1 on the i386 platform allows guest OS users to cause a denial of service (OOPS) by setting the EFER_LME (aka "Long mode enable") bit in the Extended Feature Enable Register (EFER) model-specific register, which is specific to the x86_64 platform.


Provide references for further information: Can you share references or external links related to CVE-2009-1242?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.29-git1.log'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.globalsecuritymag.com/Vigil-nce-Linux-kernel-denial-of%2C20090402%2C8311'}, {'name': 'linux-kernel-eferlme-dos(49594)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49594'}, {'name': '35226', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35226'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://patchwork.kernel.org/patch/15549/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29.1'}, {'name': '34478', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34478'}, {'name': '34331', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34331'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=16175a796d061833aacfbd9672235f2d2725df65'}, {'name': 'FEDORA-2009-5356', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01126.html'}, {'name': 'SUSE-SA:2009:032', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html'}, {'name': '35656', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35656'}, {'name': '20090516 rPSA-2009-0084-1 kernel', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/503610/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://vigilance.fr/vulnerability/Linux-kernel-denial-of-service-via-EFER-8585'}, {'name': '35120', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35120'}, {'name': 'SUSE-SA:2009:031', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html'}, {'name': 'USN-793-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/usn-793-1'}, {'name': '34981', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34981'}, {'name': 'DSA-1800', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2009/dsa-1800'}, {'name': '35387', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35387'}, {'name': 'DSA-1787', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2009/dsa-1787'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://wiki.rpath.com/Advisories:rPSA-2009-0084'}, {'name': '[oss-security] 20090401 CVE request: kernel: KVM: VMX: Dont allow uninhibited access to EFER on i386', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2009/04/01/3'}, {'name': '35121', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35121'}, {'name': 'ADV-2009-0924', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0924'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=502109'}, {'name': '35394', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35394'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1242?


Explain the CVE ID: What does the identifier CVE-2009-1243 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1243.

net/ipv4/udp.c in the Linux kernel before 2.6.29.1 performs an unlocking step in certain incorrect circumstances, which allows local users to cause a denial of service (panic) by reading zero bytes from the /proc/net/udp file and unspecified other files, related to the "udp seq_file infrastructure."


Provide references for further information: Can you share references or external links related to CVE-2009-1243?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29.1'}, {'name': '34478', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34478'}, {'name': '[oss-security] 20090401 CVE request: kernel: udp: Wrong locking code in udp seq_file infrastructure', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2009/04/01/4'}, {'name': '34329', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34329'}, {'name': 'linux-kernel-procnetudp-dos(49595)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49595'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=30842f2989aacfaba3ccb39829b3417be9313dbe'}, {'tags': ['x_refsource_MISC'], 'url': 'http://vigilance.fr/vulnerability/Linux-kernel-denial-of-service-via-proc-net-udp-8586'}, {'name': 'ADV-2009-0924', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0924'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1243?


Explain the CVE ID: What does the identifier CVE-2009-1244 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1244.

Unspecified vulnerability in the virtual machine display function in VMware Workstation 6.5.1 and earlier; VMware Player 2.5.1 and earlier; VMware ACE 2.5.1 and earlier; VMware Server 1.x before 1.0.9 build 156507 and 2.x before 2.0.1 build 156745; VMware Fusion before 2.0.4 build 159196; VMware ESXi 3.5; and VMware ESX 3.0.2, 3.0.3, and 3.5 allows guest OS users to execute arbitrary code on the host OS via unknown vectors, a different vulnerability than CVE-2008-4916.


Provide references for further information: Can you share references or external links related to CVE-2009-1244?

{'name': 'GLSA-201209-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201209-25.xml'}, {'name': 'vmware-virtualmachine-code-execution(49834)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49834'}, {'name': '34471', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34471'}, {'name': '1022031', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1022031'}, {'name': '53634', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/53634'}, {'name': 'oval:org.mitre.oval:def:6065', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6065'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/security/advisories/VMSA-2009-0006.html'}, {'name': 'ADV-2009-0944', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0944'}, {'name': '[security-announce] 20090410 VMSA-2009-0006 VMware Hosted products and patches for ESX and ESXi resolve a critical security vulnerability', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.vmware.com/pipermail/security-announce/2009/000055.html'}, {'name': '20090410 VMSA-2009-0006 VMware Hosted products and patches for ESX and ESXi resolve a critical security vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/502615/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1244?


Explain the CVE ID: What does the identifier CVE-2009-1245 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1245.

Multiple SQL injection vulnerabilities in the insert_to_pastebin function in php/cccp-admin/inc/functions.php in CCCP Community Clan Portal Pastebin before 2.80 allow remote attackers to execute arbitrary SQL commands via the (1) subject, (2) language, and (3) nickname parameters to php/cccp-pages/submit.php.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2009-1245?

{'name': '34264', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34264'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=670960'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://jcsfog.cvs.sourceforge.net/viewvc/jcsfog/CCCP-Pastebin/php/cccp-admin/inc/functions.php?r1=1.10&r2=1.11'}, {'name': 'communitycode-submit-sql-injection(49426)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49426'}, {'name': '34474', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34474'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1245?


Explain the CVE ID: What does the identifier CVE-2009-1246 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1246.

Multiple directory traversal vulnerabilities in Blogplus 1.0 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) row_mysql_blocks_center_down[file] parameter to includes/block_center_down.php; (2) row_mysql_blocks_center_top[file] includes/parameter to block_center_top.php; (3) row_mysql_blocks_left[file] parameter to includes/block_left.php; (4) row_mysql_blocks_right[file] parameter to includes/block_right.php; and row_mysql_bloginfo[theme] parameter to (5) includes/window_down.php and (6) includes/window_top.php.


Provide references for further information: Can you share references or external links related to CVE-2009-1246?

{'name': '34261', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34261'}, {'name': 'blogplus-file-theme-file-include(49446)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49446'}, {'name': '8290', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8290'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1246?


Explain the CVE ID: What does the identifier CVE-2009-1247 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1247.

SQL injection vulnerability in login.php in Acute Control Panel 1.0.0 allows remote attackers to execute arbitrary SQL commands via the username parameter.


Provide references for further information: Can you share references or external links related to CVE-2009-1247?

{'name': '8291', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8291'}, {'name': 'acutecontrol-login-sql-injection(49444)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49444'}, {'name': '34265', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34265'}, {'name': '34485', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34485'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1247?


Explain the CVE ID: What does the identifier CVE-2009-1248 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1248.

Multiple PHP remote file inclusion vulnerabilities in Acute Control Panel 1.0.0 allow remote attackers to execute arbitrary PHP code via a URL in the theme_directory parameter to (1) container.php and (2) header.php in themes/.


Provide references for further information: Can you share references or external links related to CVE-2009-1248?

{'name': '8291', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8291'}, {'name': '34265', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34265'}, {'name': '34485', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34485'}, {'name': 'acutecontrol-themedirectory-file-include(49443)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49443'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1248?


Explain the CVE ID: What does the identifier CVE-2009-1249 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1249.

Cross-site scripting (XSS) vulnerability in Feed element mapper 5.x before 5.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the content title in admin/content/node-type/nodetype/map.


Provide references for further information: Can you share references or external links related to CVE-2009-1249?

{'name': '34266', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34266'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/414702'}, {'name': '34497', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34497'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/414644'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1249?


Explain the CVE ID: What does the identifier CVE-2009-1250 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1250.

The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows remote attackers to cause a denial of service (system crash) via an RX response with a large error-code value that is interpreted as a pointer and dereferenced, related to use of the ERR_PTR macro.


Provide references for further information: Can you share references or external links related to CVE-2009-1250?

{'name': 'ADV-2011-0117', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0117'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.openafs.org/security/openafs-sa-2009-002.patch'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.openafs.org/security/OPENAFS-SA-2009-002.txt'}, {'name': 'ADV-2009-0984', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0984'}, {'name': 'MDVSA-2009:099', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2009:099'}, {'name': '34404', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34404'}, {'name': '36310', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/36310'}, {'name': '34655', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34655'}, {'name': 'DSA-1768', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2009/dsa-1768'}, {'name': 'ID71123', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg1ID71123'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21396389'}, {'name': 'GLSA-201101-05', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201101-05.xml'}, {'name': '34684', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34684'}, {'name': '42896', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42896'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1250?


Explain the CVE ID: What does the identifier CVE-2009-1251 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1251.

Heap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58 on Unix platforms allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via an RX response containing more data than specified in a request, related to use of XDR arrays.


Provide references for further information: Can you share references or external links related to CVE-2009-1251?

{'name': 'ADV-2011-0117', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0117'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.openafs.org/security/OPENAFS-SA-2009-001.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.openafs.org/security/openafs-sa-2009-001.patch'}, {'name': 'ADV-2009-0984', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0984'}, {'name': 'MDVSA-2009:099', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2009:099'}, {'name': '34407', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34407'}, {'name': '34655', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34655'}, {'name': 'DSA-1768', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2009/dsa-1768'}, {'name': 'GLSA-201101-05', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201101-05.xml'}, {'name': '34684', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34684'}, {'name': '42896', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42896'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1251?


Explain the CVE ID: What does the identifier CVE-2009-1252 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1252.

Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing an extension field.


Provide references for further information: Can you share references or external links related to CVE-2009-1252?

{'name': 'USN-777-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/777-1/'}, {'name': '35137', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35137'}, {'name': '35166', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35166'}, {'name': '37470', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/37470'}, {'name': '35388', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35388'}, {'name': '35243', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35243'}, {'name': '37471', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/37471'}, {'name': 'DSA-1801', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2009/dsa-1801'}, {'name': 'FEDORA-2009-5275', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01449.html'}, {'name': '35308', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35308'}, {'name': '35253', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35253'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.ntp.org/bugs/show_bug.cgi?id=1151'}, {'name': 'MDVSA-2009:117', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2009:117'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/security/advisories/VMSA-2009-0016.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0092'}, {'name': '1022243', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1022243'}, {'name': '35138', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35138'}, {'name': 'SSA:2009-154-01', 'tags': ['vendor-advisory', 'x_refsource_SLACKWARE'], 'url': 'http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.566238'}, {'name': 'FEDORA-2009-5273', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01414.html'}, {'name': 'SUSE-SR:2009:011', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html'}, {'name': 'FEDORA-2009-5674', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00293.html'}, {'name': '35630', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35630'}, {'name': '20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/507985/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.net/bugs/cve/2009-1252'}, {'name': 'oval:org.mitre.oval:def:11231', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11231'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=499694'}, {'name': '35017', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/35017'}, {'name': 'RHSA-2009:1040', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2009-1040.html'}, {'name': 'FreeBSD-SA-09:11', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'http://security.freebsd.org/advisories/FreeBSD-SA-09:11.ntpd.asc'}, {'name': '35416', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35416'}, {'name': 'VU#853097', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/853097'}, {'name': '35336', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35336'}, {'name': 'NetBSD-SA2009-006', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-006.txt.asc'}, {'name': 'RHSA-2009:1039', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2009-1039.html'}, {'name': 'ADV-2009-1361', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/1361'}, {'name': 'oval:org.mitre.oval:def:6307', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6307'}, {'name': '35169', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35169'}, {'name': 'GLSA-200905-08', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200905-08.xml'}, {'name': 'ADV-2009-3316', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/3316'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1252?


Explain the CVE ID: What does the identifier CVE-2009-1253 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1253.

James Stone Tunapie 2.1 allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file.


Provide references for further information: Can you share references or external links related to CVE-2009-1253?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://launchpad.net/bugs/314591'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://launchpad.net/bugs/cve/2009-1253'}, {'name': 'ADV-2009-0972', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0972'}, {'name': '34643', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34643'}, {'name': 'DSA-1764', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2009/dsa-1764'}, {'name': '53426', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/53426'}, {'name': '34417', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34417'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1253?


Explain the CVE ID: What does the identifier CVE-2009-1254 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1254.

James Stone Tunapie 2.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a stream URL.


Provide references for further information: Can you share references or external links related to CVE-2009-1254?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://launchpad.net/bugs/314591'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://launchpad.net/bugs/cve/2009-1254'}, {'name': '34418', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34418'}, {'name': 'ADV-2009-0972', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0972'}, {'name': '53427', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/53427'}, {'name': '34643', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34643'}, {'name': 'DSA-1764', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2009/dsa-1764'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1254?


Explain the CVE ID: What does the identifier CVE-2009-1255 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1255.

The process_stat function in (1) Memcached before 1.2.8 and (2) MemcacheDB 1.2.0 discloses (a) the contents of /proc/self/maps in response to a stats maps command and (b) memory-allocation statistics in response to a stats malloc command, which allows remote attackers to obtain sensitive information such as the locations of memory regions, and defeat ASLR protection, by sending a command to the daemon's TCP port.


Provide references for further information: Can you share references or external links related to CVE-2009-1255?

{'name': 'FEDORA-2009-4542', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01256.html'}, {'name': 'memcachedb-procselfmaps-info-disclosure(50221)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/50221'}, {'name': 'MDVSA-2009:105', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2009:105'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.positronsecurity.com/advisories/2009-001.html'}, {'name': '1022140', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1022140'}, {'name': 'FEDORA-2009-4199', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00851.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/memcachedb/source/diff?spec=svn98&r=98&format=side&path=/trunk/memcachedb.c'}, {'name': '20090428 Positron Security Advisory #2009-001: Memcached and MemcacheDB ASLR Bypass Weakness', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0282.html'}, {'name': '20090428 Positron Security Advisory #2009-001: Memcached and MemcacheDB ASLR Bypass Weakness', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/503064/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://groups.google.com/group/memcached/browse_thread/thread/ff96a9b88fb5d40e'}, {'name': '35175', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35175'}, {'name': '54127', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/54127'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/memcachedb/source/browse/trunk/ChangeLog?spec=svn98&r=98'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/memcachedb/source/detail?r=98'}, {'name': '34756', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34756'}, {'name': 'ADV-2009-1196', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/1196'}, {'name': '34932', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34932'}, {'name': '34915', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34915'}, {'name': 'ADV-2009-1197', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/1197'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1255?


Explain the CVE ID: What does the identifier CVE-2009-1256 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1256.

SQL injection vulnerability in FlexCMS 2.5 allows remote attackers to execute arbitrary SQL commands via the ItemId parameter.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2009-1256?

{'name': '8355', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8355'}, {'name': 'flexcms-itemid-sql-injection(49680)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49680'}, {'name': '34394', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34394'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1256?


Explain the CVE ID: What does the identifier CVE-2009-1257 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1257.

Heap-based buffer overflow in Magic ISO Maker 5.5 build 0274 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted CCD file.


Provide references for further information: Can you share references or external links related to CVE-2009-1257?

{'name': '34595', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34595'}, {'name': 'magiciso-ccd-bo(49673)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49673'}, {'name': '53262', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/53262'}, {'name': 'ADV-2009-0940', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0940'}, {'name': '8343', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8343'}, {'name': '34574', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34574'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1257?


Explain the CVE ID: What does the identifier CVE-2009-1258 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1258.

SQL injection vulnerability in the RD-Autos (com_rdautos) component 1.5.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the makeid parameter in index.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2009-1258?

{'name': '34578', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34578'}, {'name': '34364', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34364'}, {'name': 'rdautos-makeid-sql-injection(49671)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49671'}, {'name': '53138', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/53138'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1258?


Explain the CVE ID: What does the identifier CVE-2009-1259 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1259.

SQL injection vulnerability in inc/bb/topic.php in Insane Visions AdaptBB 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the topic_id parameter in a topic action to index.php.


Provide references for further information: Can you share references or external links related to CVE-2009-1259?

{'name': 'adaptbb-topic-sql-injection(49681)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49681'}, {'name': '34371', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34371'}, {'name': '8351', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8351'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1259?


Explain the CVE ID: What does the identifier CVE-2009-1260 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1260.

Multiple stack-based buffer overflows in UltraISO 9.3.3.2685 and earlier allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted (1) CCD or (2) IMG file.


Provide references for further information: Can you share references or external links related to CVE-2009-1260?

{'name': 'ultraiso-ccd-img-bo(49672)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49672'}, {'name': '34363', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34363'}, {'name': '53275', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/53275'}, {'name': 'ADV-2009-0935', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0935'}, {'name': '8343', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8343'}, {'name': '34581', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34581'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1260?


Explain the CVE ID: What does the identifier CVE-2009-1261 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1261.

Multiple cross-site scripting (XSS) vulnerabilities in Web Help Desk 9.1.22 (evaluation version) allow remote attackers to inject arbitrary web script or HTML via the (1) Report Name, (2) Asset No., and (3) Full Name fields in a Models action.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2009-1261?

{'name': '53423', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/53423'}, {'name': '34391', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34391'}, {'name': '53424', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/53424'}, {'name': '34596', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34596'}, {'name': '53422', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/53422'}, {'name': 'webhelpdesk-multiple-form-xss(49683)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49683'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1261?


Explain the CVE ID: What does the identifier CVE-2009-1262 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1262.

Format string vulnerability in Fortinet FortiClient 3.0.614, and possibly earlier, allows local users to execute arbitrary code via format string specifiers in the VPN connection name.


Provide references for further information: Can you share references or external links related to CVE-2009-1262?

{'name': '20090410 Re: Layered Defense Research Advisory: Format String Vulnerability: FortiClient Version 3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/502602/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.layereddefense.com/FortiClient02Apr.html'}, {'name': '34524', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34524'}, {'name': '34343', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34343'}, {'name': '53266', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/53266'}, {'name': 'ADV-2009-0941', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0941'}, {'name': '1021966', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1021966'}, {'name': '20090402 Layered Defense Research Advisory: Format String Vulnerability: FortiClient Version 3', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2009-April/068583.html'}, {'name': 'forticlient-vpn-format-string(49633)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49633'}, {'name': '20090402 Layered Defense Research Advisory: Format String Vulnerability: FortiClient Version 3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/502354/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1262?


Explain the CVE ID: What does the identifier CVE-2009-1263 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1263.

SQL injection vulnerability in sub_commententry.php in the BookJoomlas (com_bookjoomlas) component 0.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gbid parameter in a comment action to index.php.


Provide references for further information: Can you share references or external links related to CVE-2009-1263?

{'name': '8353', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8353'}, {'name': 'ADV-2009-0952', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0952'}, {'name': 'bookjoomlas-index-sql-injection(49682)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49682'}, {'name': '53421', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/53421'}, {'name': '34392', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34392'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1263?


Explain the CVE ID: What does the identifier CVE-2009-1264 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1264.

Frontend User Registration (sr_feuser_register) extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2009-1264?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://typo3.org/extensions/repository/view/sr_feuser_register/2.5.21/'}, {'name': '53278', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/53278'}, {'name': 'ADV-2009-0938', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0938'}, {'name': '34586', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34586'}, {'name': '34374', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34374'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-004/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1264?


Explain the CVE ID: What does the identifier CVE-2009-1265 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1265.

Integer overflow in rose_sendmsg (sys/net/af_rose.c) in the Linux kernel 2.6.24.4, and other versions before 2.6.30-rc1, might allow remote attackers to obtain sensitive information via a large length value, which causes "garbage" memory to be sent.


Provide references for further information: Can you share references or external links related to CVE-2009-1265?

{'name': '35390', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35390'}, {'name': 'MDVSA-2009:135', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2009:135'}, {'name': '53630', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/53630'}, {'name': 'SUSE-SA:2009:028', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html'}, {'name': 'SUSE-SA:2009:032', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html'}, {'name': '35656', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35656'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugzilla.kernel.org/show_bug.cgi?id=10423'}, {'name': 'DSA-1794', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2009/dsa-1794'}, {'name': '53571', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/53571'}, {'name': 'SUSE-SA:2009:030', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html'}, {'name': '35185', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35185'}, {'name': '35011', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35011'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=83e0bbcbe2145f160fbaa109b0439dae7f4a38a9'}, {'name': '34654', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34654'}, {'name': '[oss-security] 20090408 CVE-2009-1265 kernel: af_rose/x25: Sanity check the maximum user frame size', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2009/04/08/2'}, {'name': 'SUSE-SA:2009:031', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html'}, {'name': 'USN-793-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/usn-793-1'}, {'name': '53631', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/53631'}, {'name': '34981', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34981'}, {'name': 'DSA-1800', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2009/dsa-1800'}, {'name': '35387', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35387'}, {'name': 'DSA-1787', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2009/dsa-1787'}, {'name': 'MDVSA-2009:119', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2009:119'}, {'name': '35121', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35121'}, {'name': '35394', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35394'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1265?


Explain the CVE ID: What does the identifier CVE-2009-1266 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1266.

Unspecified vulnerability in Wireshark before 1.0.7 has unknown impact and attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2009-1266?

{'name': '34778', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34778'}, {'name': 'SUSE-SR:2009:011', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html'}, {'name': '20090417 rPSA-2009-0062-1 tshark wireshark', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/502745/100/0/threaded'}, {'name': 'wireshark-unspecified(50334)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/50334'}, {'name': '35416', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35416'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://wiki.rpath.com/Advisories:rPSA-2009-0062'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1266?


Explain the CVE ID: What does the identifier CVE-2009-1267 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1267.

Unspecified vulnerability in the LDAP dissector in Wireshark 0.99.2 through 1.0.6, when running on Windows, allows remote attackers to cause a denial of service (crash) via unknown attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2009-1267?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/security/wnpa-sec-2009-02.html'}, {'name': '1022027', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1022027'}, {'name': 'wireshark-ldap-home-dos(49814)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49814'}, {'name': '34778', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34778'}, {'name': 'SUSE-SR:2009:011', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html'}, {'name': '20090417 rPSA-2009-0062-1 tshark wireshark', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/502745/100/0/threaded'}, {'name': '34457', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34457'}, {'name': '35416', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35416'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://wiki.rpath.com/Advisories:rPSA-2009-0062'}, {'name': 'oval:org.mitre.oval:def:6099', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6099'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1267?


Explain the CVE ID: What does the identifier CVE-2009-1268 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1268.

The Check Point High-Availability Protocol (CPHAP) dissector in Wireshark 0.9.6 through 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted FWHA_MY_STATE packet.


Provide references for further information: Can you share references or external links related to CVE-2009-1268?

{'name': '37477', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/37477'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/security/wnpa-sec-2009-02.html'}, {'name': '1022027', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1022027'}, {'name': 'FEDORA-2009-5382', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01213.html'}, {'name': 'FEDORA-2009-5339', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01167.html'}, {'name': 'oval:org.mitre.oval:def:10876', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10876'}, {'name': '35464', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35464'}, {'name': 'RHSA-2009:1100', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2009-1100.html'}, {'name': '34778', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34778'}, {'name': 'SUSE-SR:2009:011', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html'}, {'name': '20090417 rPSA-2009-0062-1 tshark wireshark', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/502745/100/0/threaded'}, {'name': '34970', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34970'}, {'name': 'DSA-1785', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2009/dsa-1785'}, {'name': '35133', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35133'}, {'name': '34457', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34457'}, {'name': 'FEDORA-2009-3599', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00675.html'}, {'name': 'oval:org.mitre.oval:def:5335', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5335'}, {'name': '35416', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35416'}, {'name': 'MDVSA-2009:088', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2009:088'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3269'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://wiki.rpath.com/Advisories:rPSA-2009-0062'}, {'name': 'wireshark-cphap-dos(49815)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49815'}, {'name': 'DSA-1942', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2009/dsa-1942'}, {'name': '35224', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35224'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1268?


Explain the CVE ID: What does the identifier CVE-2009-1269 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1269.

Unspecified vulnerability in Wireshark 0.99.6 through 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted Tektronix .rf5 file.


Provide references for further information: Can you share references or external links related to CVE-2009-1269?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/security/wnpa-sec-2009-02.html'}, {'name': '1022027', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1022027'}, {'name': 'FEDORA-2009-5382', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01213.html'}, {'name': 'FEDORA-2009-5339', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01167.html'}, {'name': 'oval:org.mitre.oval:def:5748', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5748'}, {'name': '35464', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35464'}, {'name': 'RHSA-2009:1100', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2009-1100.html'}, {'name': 'wireshark-rf5file-dos(49816)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49816'}, {'name': '34778', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34778'}, {'name': 'SUSE-SR:2009:011', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html'}, {'name': '20090417 rPSA-2009-0062-1 tshark wireshark', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/502745/100/0/threaded'}, {'name': '34970', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34970'}, {'name': 'DSA-1785', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2009/dsa-1785'}, {'name': '35133', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35133'}, {'name': '34457', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34457'}, {'name': 'FEDORA-2009-3599', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00675.html'}, {'name': '35416', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35416'}, {'name': 'oval:org.mitre.oval:def:10642', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10642'}, {'name': 'MDVSA-2009:088', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2009:088'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://wiki.rpath.com/Advisories:rPSA-2009-0062'}, {'name': '35224', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35224'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1269?


Explain the CVE ID: What does the identifier CVE-2009-1270 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1270.

libclamav/untar.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (infinite loop) via a crafted TAR file that causes (1) clamd and (2) clamscan to hang.


Provide references for further information: Can you share references or external links related to CVE-2009-1270?

{'name': 'clamav-untar-dos(49846)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49846'}, {'name': '34357', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34357'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1462'}, {'name': '34716', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34716'}, {'name': '53461', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/53461'}, {'name': 'MDVSA-2009:097', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2009:097'}, {'name': 'ADV-2009-0934', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0934'}, {'name': 'APPLE-SA-2009-09-10-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html'}, {'name': 'DSA-1771', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2009/dsa-1771'}, {'name': '[oss-security] 20090407 Re: CVE request: clamav clamd and clamscan DoS and bypass by malformated archive', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2009/04/07/6'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT3865'}, {'name': '36701', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/36701'}, {'name': 'USN-754-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/usn-754-1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1270?


Explain the CVE ID: What does the identifier CVE-2009-1271 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1271.

The JSON_parser function (ext/json/JSON_parser.c) in PHP 5.2.x before 5.2.9 allows remote attackers to cause a denial of service (segmentation fault) via a malformed string to the json_decode API function.


Provide references for further information: Can you share references or external links related to CVE-2009-1271?

{'name': '[oss-security] 20090401 CVE request: PHP 5.2.9', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2009/04/01/9'}, {'name': 'DSA-1775', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2009/dsa-1775'}, {'name': 'FEDORA-2009-3768', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://cvs.php.net/viewvc.cgi/php-src/ext/json/JSON_parser.c?r1=1.1.2.14&r2=1.1.2.15'}, {'name': '34770', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34770'}, {'name': 'APPLE-SA-2009-09-10-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.php.net/releases/5_2_9.php'}, {'name': '35007', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35007'}, {'name': '34933', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34933'}, {'name': '34830', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34830'}, {'name': 'USN-761-2', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-761-2'}, {'name': 'RHSA-2009:0350', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2009-0350.html'}, {'name': 'FEDORA-2009-3848', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html'}, {'name': '35003', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35003'}, {'name': '35685', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35685'}, {'name': 'SUSE-SR:2009:012', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT3865'}, {'name': '36701', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/36701'}, {'name': 'MDVSA-2009:090', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2009:090'}, {'name': '35306', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35306'}, {'name': 'USN-761-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/761-1/'}, {'name': 'DSA-1789', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2009/dsa-1789'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1271?


Explain the CVE ID: What does the identifier CVE-2009-1272 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1272.

The php_zip_make_relative_path function in php_zip.c in PHP 5.2.x before 5.2.9 allows context-dependent attackers to cause a denial of service (crash) via a ZIP file that contains filenames with relative paths, which is not properly handled during extraction.


Provide references for further information: Can you share references or external links related to CVE-2009-1272?

{'name': '[oss-security] 20090409 Re: CVE request: PHP 5.2.9', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2009/04/09/1'}, {'name': '[oss-security] 20090401 CVE request: PHP 5.2.9', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2009/04/01/9'}, {'name': 'APPLE-SA-2009-09-10-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.php.net/releases/5_2_9.php'}, {'tags': ['x_refsource_MISC'], 'url': 'http://cvs.php.net/viewvc.cgi/php-src/ext/zip/php_zip.c?r1=1.1.2.48&r2=1.1.2.49'}, {'name': '35685', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35685'}, {'name': 'SUSE-SR:2009:012', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT3865'}, {'name': '36701', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/36701'}, {'name': 'HPSBMA02447', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=125017764422557&w=2'}, {'name': 'SSRT090062', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=125017764422557&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1272?


Explain the CVE ID: What does the identifier CVE-2009-1273 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1273.

pam_ssh 1.92 and possibly other versions, as used when PAM is compiled with USE=ssh, generates different error messages depending on whether the username is valid or invalid, which makes it easier for remote attackers to enumerate usernames.


Provide references for further information: Can you share references or external links related to CVE-2009-1273?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=263579'}, {'name': '34986', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34986'}, {'name': '34536', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34536'}, {'name': 'FEDORA-2009-3500', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00116.html'}, {'name': 'FEDORA-2009-3627', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00145.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1273?


Explain the CVE ID: What does the identifier CVE-2009-1274 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1274.

Integer overflow in the qt_error parse_trak_atom function in demuxers/demux_qt.c in xine-lib 1.1.16.2 and earlier allows remote attackers to execute arbitrary code via a Quicktime movie file with a large count value in an STTS atom, which triggers a heap-based buffer overflow.