CVE-2009-3476 | BDVDB-2026-38745 Detail

Description#

Buffer overflow in OpenSAML before 1.1.3 as used in Internet2 Shibboleth Service Provider software 1.3.x before 1.3.4, and XMLTooling before 1.2.2 as used in Internet2 Shibboleth Service Provider software 2.x before 2.2.1, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed encoded URL.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/36870
http://www.securityfocus.com/bid/36514
http://secunia.com/advisories/36869
https://exchange.xforce.ibmcloud.com/vulnerabilities/53471
http://shibboleth.internet2.edu/secadv/secadv_20090826.txt

Exploit#

No public exploit known

History#

Version 12009-09-29Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.