Description (CNA)
Buffer overflow in OpenSAML before 1.1.3 as used in Internet2 Shibboleth Service Provider software 1.3.x before 1.3.4, and XMLTooling before 1.2.2 as used in Internet2 Shibboleth Service Provider software 2.x before 2.2.1, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed encoded URL.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://secunia.com/advisories/36870
- http://www.securityfocus.com/bid/36514
- http://secunia.com/advisories/36869
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53471
- http://shibboleth.internet2.edu/secadv/secadv_20090826.txt
ADP enrichment
No English description supplied.