CVE-2009-3564

puppetmasterd does not initialize supplementary groups

puppetmasterd in puppet 0.24.6 does not reset supplementary groups when it switches to a different user, which might allow local users to access restricted files.

CVSS 2.0 · 4.7 Medium EPSS < 1% KEV · Not listed

Vendors

Fedoraproject Reductivelabs

Products

Fedora Puppet

CVE-2009-3611

backintime: makes all files world-readable in snapshot when removing it

common/snapshots.py in Back In Time (aka backintime) 0.9.26 changes certain permissions to 0777 before deleting the files in an old backup snapshot, which allows local users to obtain sensitive information by reading these files, or interfere with backup integrity by modifying files that are shared across snapshots.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Fedoraproject Le-web

Products

Fedora Backintime

CVE-2009-3612

kernel: tcf_fill_node() infoleak due to typo in 9ef1d4c7

The tcf_fill_node function in net/sched/cls_api.c in the netlink subsystem in the Linux kernel 2.6.x before 2.6.32-rc5, and 2.4.37.6 and earlier, does not initialize a certain tcm__pad2 structure member, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors. NOTE: this issue exists because of an incomplete fix for CVE-2005-4881.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed

Vendors

Canonical Fedoraproject Linux and 3 more

Products

Ubuntu Linux Fedora Linux Kernel and 6 more

CVE-2009-3620

kernel: r128 IOCTL NULL pointer dereferences when CCE state is uninitialised

The ATI Rage 128 (aka r128) driver in the Linux kernel before 2.6.31-git11 does not properly verify Concurrent Command Engine (CCE) state initialization, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly gain privileges via unspecified ioctl calls.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Canonical Fedoraproject Linux and 3 more

Products

Ubuntu Linux Fedora Linux Kernel and 8 more

CVE-2009-3621

kernel: AF_UNIX: Fix deadlock on connecting to shutdown socket

net/unix/af_unix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of service (system hang) by creating an abstract-namespace AF_UNIX listening socket, performing a shutdown operation on this socket, and then performing a series of connect operations to this socket.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Canonical Fedoraproject Linux and 4 more

Products

Ubuntu Linux Fedora Linux Kernel and 7 more

CVE-2009-3231

postgresql: LDAP authentication bypass when anonymous LDAP bind are allowed

The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password.

CVSS 2.0 · 6.8 Medium EPSS 7.6% KEV · Not listed

Vendors

Canonical Fedoraproject Opensuse and 2 more

Products

Ubuntu Linux Fedora Opensuse and 3 more

CVE-2009-3094

httpd: NULL pointer defer in mod_proxy_ftp caused by crafted EPSV and PASV reply

The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cause a denial of service (NULL pointer dereference and child process crash) via a malformed reply to an EPSV command.

CVSS 2.0 · 2.6 Low EPSS 8.6% KEV · Not listed

Vendors

Apache Debian Fedoraproject and 1 more

Products

Http Server Debian Linux Fedora and 3 more

CVE-2009-3095

httpd: mod_proxy_ftp FTP command injection via Authorization HTTP header

The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.

CVSS 2.0 · 5.0 Medium EPSS 13.5% KEV · Not listed

Vendors

Apache Apple Debian and 4 more

Products

Http Server Mac Os X Debian Linux and 7 more

CVE-2009-2813

Samba: Share restriction bypass via home-less directory user account(s)

Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote authenticated users to bypass intended sharing restrictions, and read, create, or modify files, in certain circumstances involving user accounts that lack home directories.

CVSS 2.0 · 6.0 Medium EPSS 2.7% KEV · Not listed

Vendors

Apple Fedoraproject Redhat and 1 more

Products

Mac Os X Mac Os X Server Fedora and 3 more

CVE-2009-2816

qt: MITM in the WebKit's Cross-Origin Resource Sharing (CORS) implementation

The implementation of Cross-Origin Resource Sharing (CORS) in WebKit, as used in Apple Safari before 4.0.4 and Google Chrome before 3.0.195.33, includes certain custom HTTP headers in the OPTIONS request during cross-origin operations with preflight, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via a crafted web page.

CVSS 2.0 · 6.8 Medium EPSS 1.6% KEV · Not listed

Vendors

Apple Fedoraproject Google and 1 more

Products

Iphone Os Safari Fedora and 2 more

CVE-2009-2848

kernel: execve: must clear current->clear_child_tid

The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current->clear_child_tid pointer, which allows local users to cause a denial of service (memory corruption) or possibly gain privileges via a clone system call with CLONE_CHILD_SETTID or CLONE_CHILD_CLEARTID enabled, which is not properly handled during thread creation and exit.

CVSS 2.0 · 5.9 Medium EPSS < 1% KEV · Not listed

Vendors

Canonical Fedoraproject Linux and 5 more

Products

Ubuntu Linux Fedora Linux Kernel and 12 more

CVE-2009-2904

openssh: possible privilege escalation when using ChrootDirectory setting

A certain Red Hat modification to the ChrootDirectory feature in OpenSSH 4.8, as used in sshd in OpenSSH 4.3 in Red Hat Enterprise Linux (RHEL) 5.4 and Fedora 11, allows local users to gain privileges via hard links to setuid programs that use configuration files within the chroot directory, related to requirements for directory ownership.

CVSS 2.0 · 6.9 Medium EPSS < 1% KEV · Not listed

Vendors

Fedoraproject Openbsd Redhat

Products

Fedora Openssh Enterprise Linux and 2 more

CVE-2009-2910

kernel: x86_64 32 bit process register leak

arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.31.4 on the x86_64 platform does not clear certain kernel registers before a return to user mode, which allows local users to read register values from an earlier process by switching an ia32 process to 64-bit mode.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed

Vendors

Canonical Fedoraproject Linux and 3 more

Products

Ubuntu Linux Fedora Linux Kernel and 12 more

CVE-2009-2625

JDK: XML parsing Denial-Of-Service (6845701)

XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.

CVSS 2.0 · 5.0 Medium EPSS 30.4% KEV · Not listed

Vendors

Apache Canonical Debian and 5 more

Products

Xerces2 Java Ubuntu Linux Debian Linux and 15 more

CVE-2009-2629

nginx: ngx_http_parse_complex_uri() buffer underflow vulnerability (VU#180065)

Buffer underflow in src/http/ngx_http_parse.c in nginx 0.1.0 through 0.5.37, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.15 allows remote attackers to execute arbitrary code via crafted HTTP requests.

CVSS 2.0 · 7.5 High EPSS 75.1% KEV · Not listed

Vendors

Debian F5 Fedoraproject

Products

Debian Linux Nginx Fedora

CVE-2009-2698

kernel: udp socket NULL ptr dereference

The udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving the MSG_MORE flag and a UDP socket.

CVSS 3.1 · 7.8 High EPSS 7.1% KEV · Not listed

Vendors

Canonical Fedoraproject Linux and 3 more

Products

Ubuntu Linux Fedora Linux Kernel and 11 more

CVE-2009-2416

mingw32-libxml2: Pointer use-after-free flaws by parsing Notation and Enumeration attribute types

Multiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allow context-dependent attackers to cause a denial of service (application crash) via crafted (1) Notation or (2) Enumeration attribute types in an XML file, as demonstrated by the Codenomicon XML fuzzing framework.

CVSS 3.1 · 6.5 Medium EPSS 2.0% KEV · Not listed

Vendors

Apple Canonical Debian and 8 more

Products

Iphone Os Mac Os X Mac Os X Server and 16 more

CVE-2009-2472

Mozilla multiple cross origin wrapper bypasses

Mozilla Firefox before 3.0.12 does not always use XPCCrossOriginWrapper when required during object construction, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted document, related to a "cross origin wrapper bypass."

CVSS 2.0 · 4.3 Medium EPSS 2.2% KEV · Not listed

Vendors

Fedoraproject Mozilla Opensuse and 2 more

Products

Fedora Firefox Opensuse and 4 more

CVE-2009-2474

neon: Improper verification of x509v3 certificate with NULL (zero) byte in certain fields

neon before 0.28.6, when OpenSSL or GnuTLS is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

CVSS 2.0 · 5.8 Medium EPSS 1.5% KEV · Not listed

Vendors

Apple Canonical Fedoraproject and 2 more

Products

Mac Os X Ubuntu Linux Fedora and 2 more

CVE-2009-1890

httpd: mod_proxy reverse proxy DoS (infinite loop)

The stream_reqbody_cl function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server before 2.3.3, when a reverse proxy is configured, does not properly handle an amount of streamed data that exceeds the Content-Length value, which allows remote attackers to cause a denial of service (CPU consumption) via crafted requests.

CVSS 2.0 · 7.1 High EPSS 16.2% KEV · Not listed

Vendors

Apache Canonical Debian and 2 more

Products

Http Server Ubuntu Linux Debian Linux and 8 more