CVE-2010-1564

CVE-2010-1564 is rejected/not used; this entry is a duplicate of CVE-2009-1564.

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-1241. Reason: This candidate is a duplicate of CVE-2010-1241. Notes: All CVE users should reference CVE-2010-1241 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2010-0200

CVE-2010-0200 is rejected/not used; a duplicate of CVE-2010-1241.

Signing in with username with different case creates new user

We currently utilize LDAP for our user repository and allow users to be automatically added to crucible if they can successfully authenticate. We have recently received complaints from users that their names were showing up two times in reviews. After some analysis we saw that there were 2...

Signing in with username with different case creates new user

We currently utilize LDAP for our user repository and allow users to be automatically added to crucible if they can successfully authenticate. We have recently received complaints from users that their names were showing up two times in reviews. After some analysis we saw that there were 2...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-0969. Reason: This candidate is a duplicate of CVE-2010-0969. Notes: All CVE users should reference CVE-2010-0969 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2010-0735

CVE-2010-0735 is a duplicate of CVE-2010-0969 (Rejected reason in the initial entry). Connected documents describe CVE-2010-0969 as a remote denial-of-service vulnerability in Unbound DNS resolver, caused by improper allocation of sock_list structures before version 1.4.3. Affected product: Unbound

Microsoft SMB NTLM Authentication Lack of Entropy (MS10-012; CVE-2010-0231)

The SMB Protocol is a network file sharing protocol that is implemented in Microsoft Windows. An elevation of privilege vulnerability has been reported in the way that Microsoft Server Message Block SMB Protocol software handles authentication attempts. The vulnerability is due to a lack of...

CVE-2009-4481

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2009-3111. Reason: This candidate is a duplicate of CVE-2009-3111. Notes: All CVE users should reference CVE-2009-3111 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2009-4481

CVE-2009-3111 (FreeRADIUS) is a remote denial-of-service vulnerability in the radiusd daemon caused by a flaw in rad_decode handling of Tunnel-Password attributes with zero length. The issue can crash radiusd via specially crafted RADIUS packets. Remediation observed in connected advisories inclu...

CVE-2009-3908

CVE-2009-3908 is a duplicate and explicitly rejected; not an active vulnerability entry.

CVE-2009-3907

CVE-2009-3907 is a duplicate of CVE-2009-3607. The underlying issue is in Poppler (0.x): integer overflow in create_surface_from_thumbnail_data (glib/poppler-page.cc) that can cause memory corruption, potentially leading to denial of service or remote code execution when processing crafted PDFs. ...

CVE-2009-4132

CVE-2009-4132 is rejected/not used; duplicate of CVE-2009-4214.

CVE-2009-4054

CVE-2009-3672 affects Microsoft Internet Explorer 6 and 7. The vulnerability stems from improper handling of memory objects by getElementsByTagName for the STYLE tag, leading to a memory corruption that enables remote code execution via mshtml.dll. The issue was originally tracked as CVE-2009-405...

Firefox 3.5.3 Remote Array Overrun (UPDATE)

Please update CVE-2009-1563 BID:36851 and BID:36843 Mozilla has changed credit. http://www.mozilla.org/security/announce/2009/mfsa2009-59.html and add correct CVE: CVE-2009-0689. CVE-2009-1563 shouldn't never exists. It is duplicate...

CVE-2008-4826

CVE-2008-4826 is rejected; duplicate of CVE-2009-3853 and not an active vulnerability entry.

CVE-2009-1563

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2009-0689. Reason: This candidate is a duplicate of CVE-2009-0689. Certain codebase relationships were not originally clear. Notes: All CVE users should reference CVE-2009-0689 instead of this candidate. All references and...

CVE-2009-1563

CVE-2009-0689 is the active vulnerability; CVE-2009-1563 is a duplicate. Connected advisories show this flaw affects multiple projects via a boundary/array-index condition in floating-point conversion code (e.g., Mono’s string-to-double parser) that may crash and, in some contexts, allow arbitrar...

CVE-2009-3454

CVE-2009-2510 describes a spoofing vulnerability in the Windows CryptoAPI where the Common Name (CN) field in X.509 certificates containing a NULL terminator is misparsed, allowing MITM-style impersonation if a malicious cert is issued by a trusted CA. The issue affects multiple Windows versions ...

CVE-2009-3239

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2009-2139, CVE-2009-2140. Reason: This candidate is a duplicate of CVE-2009-2139 and CVE-2009-2140. Notes: All CVE users should reference CVE-2009-2139 and CVE-2009-2140 instead of this candidate. All references and descriptions i...