CVE-2009-4839

The CVE-2009-4839 entry concerns the Basic Analysis and Security Engine (BASE), likely versions 1.4.4 and earlier. The issue comprises multiple input-validation vulnerabilities in BASE allowing remote attackers to inject arbitrary web script or HTML (XSS) via parameters to admin/base_roleadmin.ph...

CVE-2007-4839

CVE-2007-4839 concerns IBM WebSphere Application Server 6.1 prior to Fix Pack 11 (6.1.0.11), specifically in the PD tools component. The vulnerability is described as unspecified with unknown impact and attack vectors (aka PK33803). The available connected sources corroborate the affected product...

CVE-2005-4839

PureTLS CVE-2005-4839 affects versions before 0.9b5, where optional Extensions and Algorithm.Parameters values are not cleared before parsing, potentially leaking values from earlier certificates. The vulnerability is disclosed in multiple sources (NVD, CVE list) and tied to PureTLS prior to 0.9b...

CVE-2006-4839

CVE-2006-4839 affects Sophos Anti-Virus 5.1. The vulnerability occurs when the scanning engine processes a Petite-compressed file with a large number of sections, causing memory exhaustion and a denial-of-service condition on vulnerable systems. Exploitation is remote and can impact auto-scan/fil...