Unscored DSA-1895-1 3 CVEs

xmltooling - potential code execution

Published Sep 24, 2009 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 5.0	xmltooling	1.0-2+lenny1

Vulnerabilities 3

Unscored —

CVE-2009-3474

OpenSAML 2.x before 2.2.1 and XMLTooling 1.x before 1.2.1, as used by Internet2 Shibboleth Service Provider 2.x before …

shibboleth-sp xmltooling opensaml Debian

Sep 29, 2009
Unscored —

CVE-2009-3475

Internet2 Shibboleth Service Provider software 1.3.x before 1.3.3 and 2.x before 2.2.1, when using PKIX trust validatio…

xmltooling shibboleth-sp opensaml Debian

Sep 29, 2009
Unscored —

CVE-2009-3476

Buffer overflow in OpenSAML before 1.1.3 as used in Internet2 Shibboleth Service Provider software 1.3.x before 1.3.4, …

shibboleth-sp xmltooling opensaml Debian

Sep 29, 2009