cvelist/2009/1xxx/CVE-2009-1252.json
2018-10-10 15:05:20 -04:00

253 lines
8.2 KiB
JSON

{
"CVE_data_meta" : {
"ASSIGNER" : "cve@mitre.org",
"ID" : "CVE-2009-1252",
"STATE" : "PUBLIC"
},
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "n/a",
"version" : {
"version_data" : [
{
"version_value" : "n/a"
}
]
}
}
]
},
"vendor_name" : "n/a"
}
]
}
},
"data_format" : "MITRE",
"data_type" : "CVE",
"data_version" : "4.0",
"description" : {
"description_data" : [
{
"lang" : "eng",
"value" : "Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing an extension field."
}
]
},
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng",
"value" : "n/a"
}
]
}
]
},
"references" : {
"reference_data" : [
{
"name" : "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components",
"refsource" : "BUGTRAQ",
"url" : "http://www.securityfocus.com/archive/1/507985/100/0/threaded"
},
{
"name" : "https://launchpad.net/bugs/cve/2009-1252",
"refsource" : "MISC",
"url" : "https://launchpad.net/bugs/cve/2009-1252"
},
{
"name" : "https://bugzilla.redhat.com/show_bug.cgi?id=499694",
"refsource" : "CONFIRM",
"url" : "https://bugzilla.redhat.com/show_bug.cgi?id=499694"
},
{
"name" : "https://support.ntp.org/bugs/show_bug.cgi?id=1151",
"refsource" : "CONFIRM",
"url" : "https://support.ntp.org/bugs/show_bug.cgi?id=1151"
},
{
"name" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0092",
"refsource" : "CONFIRM",
"url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0092"
},
{
"name" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
"refsource" : "CONFIRM",
"url" : "http://www.vmware.com/security/advisories/VMSA-2009-0016.html"
},
{
"name" : "DSA-1801",
"refsource" : "DEBIAN",
"url" : "http://www.debian.org/security/2009/dsa-1801"
},
{
"name" : "FEDORA-2009-5273",
"refsource" : "FEDORA",
"url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01414.html"
},
{
"name" : "FEDORA-2009-5275",
"refsource" : "FEDORA",
"url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01449.html"
},
{
"name" : "FEDORA-2009-5674",
"refsource" : "FEDORA",
"url" : "https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00293.html"
},
{
"name" : "FreeBSD-SA-09:11",
"refsource" : "FREEBSD",
"url" : "http://security.freebsd.org/advisories/FreeBSD-SA-09:11.ntpd.asc"
},
{
"name" : "GLSA-200905-08",
"refsource" : "GENTOO",
"url" : "http://www.gentoo.org/security/en/glsa/glsa-200905-08.xml"
},
{
"name" : "MDVSA-2009:117",
"refsource" : "MANDRIVA",
"url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:117"
},
{
"name" : "NetBSD-SA2009-006",
"refsource" : "NETBSD",
"url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-006.txt.asc"
},
{
"name" : "RHSA-2009:1039",
"refsource" : "REDHAT",
"url" : "http://rhn.redhat.com/errata/RHSA-2009-1039.html"
},
{
"name" : "RHSA-2009:1040",
"refsource" : "REDHAT",
"url" : "http://rhn.redhat.com/errata/RHSA-2009-1040.html"
},
{
"name" : "SSA:2009-154-01",
"refsource" : "SLACKWARE",
"url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.566238"
},
{
"name" : "SUSE-SR:2009:011",
"refsource" : "SUSE",
"url" : "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html"
},
{
"name" : "USN-777-1",
"refsource" : "UBUNTU",
"url" : "https://usn.ubuntu.com/777-1/"
},
{
"name" : "VU#853097",
"refsource" : "CERT-VN",
"url" : "http://www.kb.cert.org/vuls/id/853097"
},
{
"name" : "35017",
"refsource" : "BID",
"url" : "http://www.securityfocus.com/bid/35017"
},
{
"name" : "oval:org.mitre.oval:def:11231",
"refsource" : "OVAL",
"url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11231"
},
{
"name" : "oval:org.mitre.oval:def:6307",
"refsource" : "OVAL",
"url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6307"
},
{
"name" : "1022243",
"refsource" : "SECTRACK",
"url" : "http://www.securitytracker.com/id?1022243"
},
{
"name" : "35137",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/35137"
},
{
"name" : "35166",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/35166"
},
{
"name" : "35169",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/35169"
},
{
"name" : "35243",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/35243"
},
{
"name" : "35253",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/35253"
},
{
"name" : "35138",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/35138"
},
{
"name" : "35308",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/35308"
},
{
"name" : "35336",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/35336"
},
{
"name" : "35416",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/35416"
},
{
"name" : "35388",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/35388"
},
{
"name" : "35630",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/35630"
},
{
"name" : "37470",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/37470"
},
{
"name" : "37471",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/37471"
},
{
"name" : "ADV-2009-1361",
"refsource" : "VUPEN",
"url" : "http://www.vupen.com/english/advisories/2009/1361"
},
{
"name" : "ADV-2009-3316",
"refsource" : "VUPEN",
"url" : "http://www.vupen.com/english/advisories/2009/3316"
}
]
}
}