CVE-2009-3476: Buffer Overflow
First published: Tue Sep 29 2009(Updated: )
Buffer overflow in OpenSAML before 1.1.3 as used in Internet2 Shibboleth Service Provider software 1.3.x before 1.3.4, and XMLTooling before 1.2.2 as used in Internet2 Shibboleth Service Provider software 2.x before 2.2.1, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed encoded URL.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Internet2 Shibboleth-sp | =1.3.1 | |
| Internet2 Shibboleth-sp | =1.3.2 | |
| Internet2 Shibboleth-sp | =1.3.3 | |
| Internet2 Shibboleth-sp | =1.3f | |
| Internet2 Opensaml | =1.1 | |
| Internet2 Opensaml | =1.1.1 | |
| Internet2 Xmltooling | =1.0.1 | |
| Internet2 Xmltooling | =1.1.0 | |
| Internet2 Xmltooling | =1.1.1 | |
| Internet2 Xmltooling | =1.2.0 | |
| Internet2 Xmltooling | =1.2.1 | |
| Internet2 Shibboleth-sp | =2.0 | |
| Internet2 Shibboleth-sp | =2.1 | |
| Internet2 Shibboleth-sp | =2.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/description
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/internet2
- canonical/internet2 shibboleth-sp
- version/internet2 shibboleth-sp/1.3.1
- version/internet2 shibboleth-sp/1.3.2
- version/internet2 shibboleth-sp/1.3.3
- version/internet2 shibboleth-sp/1.3f
- canonical/internet2 opensaml
- version/internet2 opensaml/1.1
- version/internet2 opensaml/1.1.1
- canonical/internet2 xmltooling
- version/internet2 xmltooling/1.0.1
- version/internet2 xmltooling/1.1.0
- version/internet2 xmltooling/1.1.1
- version/internet2 xmltooling/1.2.0
- version/internet2 xmltooling/1.2.1
- version/internet2 shibboleth-sp/2.0
- version/internet2 shibboleth-sp/2.1
- version/internet2 shibboleth-sp/2.2