NVD

Id
50677  
Name
CVE-2009-3476  
Description
Buffer overflow in OpenSAML before 1.1.3 as used in Internet2 Shibboleth Service Provider software 1.3.x before 1.3.4, and XMLTooling before 1.2.2 as used in Internet2 Shibboleth Service Provider software 2.x before 2.2.1, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed encoded URL.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-09-29  
Modified Date
2009-09-30  
Seq
2009-3476  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
256149 50677 CVE-2009-3476 http://shibboleth.internet2.edu/secadv/secadv_20090826.txt  View
256150 50677 CVE-2009-3476 36514  View
256151 50677 CVE-2009-3476 opensaml-xmltooling-url-bo(53471)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44002 JVNDB-2009-005009 Internet2 Shibboleth Service Provider の OpenSAML におけるバッファオーバーフローの脆弱性 Internet2 Shibboleth Service Provider ソフトウェアで使用される OpenSAML および XMLTooling には、バッファオーバーフローの脆弱性が存在します。 CVE-2009-3476 40907 CVE-2009-3476 50677 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005009.html 2009-09-29 2012-09-25 View