CVE-2009-3476

2009-09-2900:00:00

ubuntu.com

0.035 Low

EPSS

Percentile

91.5%

JSON

Buffer overflow in OpenSAML before 1.1.3 as used in Internet2 Shibboleth
Service Provider software 1.3.x before 1.3.4, and XMLTooling before 1.2.2
as used in Internet2 Shibboleth Service Provider software 2.x before 2.2.1,
allows remote attackers to cause a denial of service and possibly execute
arbitrary code via a malformed encoded URL.

OSVersionArchitecturePackageVersionFilename
ubuntu8.10noarchopensaml< 1.1.1-2+lenny1build0.8.10.2UNKNOWN
ubuntu9.04noarchopensaml< 1.1.1-2+lenny1build0.9.04.2UNKNOWN
ubuntu9.04noarchshibboleth-sp< 1.3.1.dfsg1-3+lenny1build0.9.04.2UNKNOWN
ubuntu8.10noarchxmltooling< 1.0-2+lenny1build0.8.10.1UNKNOWN
ubuntu9.04noarchxmltooling< 1.0-2+lenny1build0.9.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	8.10	noarch	opensaml	< 1.1.1-2+lenny1build0.8.10.2	UNKNOWN
ubuntu	9.04	noarch	opensaml	< 1.1.1-2+lenny1build0.9.04.2	UNKNOWN
ubuntu	9.04	noarch	shibboleth-sp	< 1.3.1.dfsg1-3+lenny1build0.9.04.2	UNKNOWN
ubuntu	8.10	noarch	xmltooling	< 1.0-2+lenny1build0.8.10.1	UNKNOWN
ubuntu	9.04	noarch	xmltooling	< 1.0-2+lenny1build0.9.04.1	UNKNOWN