Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-0250 State: PUBLISHED Published: 2014-06-06T14:00:00 Last Updated: 2024-08-06T14:18:09.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: The init_nss_hash function in exec/totemcrypto.c in Corosync 2.0 before 2.3 does not properly initialize the HMAC key, which allows remote attackers to cause a denial of service (crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/52037 - https://github.com/corosync/corosync/commit/b3f456a8ceefac6e9f2e9acc2ea0c159d412b595 - http://seclists.org/oss-sec/2013/q1/213 - http://seclists.org/oss-sec/2013/q1/214 - http://seclists.org/oss-sec/2013/q1/212
CVE ID: CVE-2013-0251 State: PUBLISHED Published: 2013-03-19T14:00:00Z Last Updated: 2024-09-17T02:57:54.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in llogincircuit.cc in latd 1.25 through 1.30 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the llogin version. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699625 - http://www.openwall.com/lists/oss-security/2013/02/05/2 - http://www.openwall.com/lists/oss-security/2013/02/04/3
CVE ID: CVE-2013-0252 State: PUBLISHED Published: 2013-03-12T21:00:00 Last Updated: 2024-08-06T14:18:09.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: boost::locale::utf::utf_traits in the Boost.Locale library in Boost 1.48 through 1.52 does not properly detect certain invalid UTF-8 sequences, which might allow remote attackers to bypass input validation protection mechanisms via crafted trailing bytes. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-February/099122.html - http://www.securityfocus.com/bid/57675 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699649 - https://bugzilla.redhat.co
//www.securityfocus.com/bid/57675 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699649 - https://bugzilla.redhat.com/show_bug.cgi?id=907481 - https://svn.boost.org/trac/boost/ticket/7743 - http://www.openwall.com/lists/oss-security/2013/02/04/2 - http://lists.fedoraproject.org/pipermail/package-announce/2013-February/099103.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699650 - http://www.boost.org/users/news/boost_locale_security_notice.html - http://www.ubuntu.com/usn/USN-1727-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:065
CVE ID: CVE-2013-0253 State: PUBLISHED Published: 2013-04-09T20:00:00 Last Updated: 2024-08-06T14:18:09.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Apache Maven 3.0.4, when using Maven Wagon 2.1, disables SSL certificate checks, which allows remote attackers to spoof servers via a man-in-the-middle (MITM) attack. Additional Analyst Notes: - CVE Program Container: References: - https://maven.apache.org/security.html - http://rhn.redhat.com/errata/RHSA-2013-0700.html - https://bugzilla.redhat.com/show_bug.cgi?id=917084 - https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3
//lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E
CVE ID: CVE-2013-0254 State: PUBLISHED Published: 2013-02-06T11:00:00 Last Updated: 2024-08-06T14:18:09.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: The QSharedMemory class in Qt 5.0.0, 4.8.x before 4.8.5, 4.7.x before 4.7.6, and other versions including 4.4.0 uses weak permissions (world-readable and world-writable) for shared memory segments, which allows local users to read sensitive information or modify critical program data, as demonstrated by reading a pixmap being sent to an X server. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-03/msg00015.html - http://rhn.redhat.com/errata/RHSA-2013-0669.html -
- http://lists.opensuse.org/opensuse-updates/2013-03/msg00015.html - http://rhn.redhat.com/errata/RHSA-2013-0669.html - http://lists.opensuse.org/opensuse-updates/2013-03/msg00014.html - http://lists.qt-project.org/pipermail/announce/2013-February/000023.html - http://lists.opensuse.org/opensuse-updates/2013-03/msg00019.html - https://bugzilla.redhat.com/show_bug.cgi?id=907425
CVE ID: CVE-2013-0255 State: PUBLISHED Published: 2013-02-13T01:00:00 Last Updated: 2024-08-06T14:18:09.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: PostgreSQL 9.2.x before 9.2.3, 9.1.x before 9.1.8, 9.0.x before 9.0.12, 8.4.x before 8.4.16, and 8.3.x before 8.3.23 does not properly declare the enum_recv function in backend/utils/adt/enum.c, which causes it to be invoked with incorrect arguments and allows remote authenticated users to cause a denial of service (server crash) or read sensitive process memory via a crafted SQL command, which triggers an array index error and an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://lists
ray index error and an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098586.html - http://www.debian.org/security/2013/dsa-2630 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00060.html - http://lists.opensuse.org/opensuse-updates/2013-02/msg00059.html - http://www.postgresql.org/docs/8.4/static/release-8-4-16.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:142 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81917 - https://bugzilla.redhat.com/show_bug.cgi?id=907892 - http://secunia.com/advisories/51923 - http://www.postgresql.org/docs/9.1/static/r
la.redhat.com/show_bug.cgi?id=907892 - http://secunia.com/advisories/51923 - http://www.postgresql.org/docs/9.1/static/release-9-1-8.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.securityfocus.com/bid/57844 - https://blogs.oracle.com/sunsecurity/entry/cve_2013_0255_array_index - http://www.ubuntu.com/usn/USN-1717-1 - http://securitytracker.com/id?1028092 - http://www.postgresql.org/docs/8.3/static/release-8-3-23.html - http://osvdb.org/89935 - http://rhn.redhat.com/errata/RHSA-2013-1475.html - http://www.postgresql.org/docs/9.2/static/release-9-2-3.html - http://www.postgresql.org/docs/9.0/static/release-9-0-12.html - http://secunia.com/advis
9.2/static/release-9-2-3.html - http://www.postgresql.org/docs/9.0/static/release-9-0-12.html - http://secunia.com/advisories/52819
CVE ID: CVE-2013-0256 State: PUBLISHED Published: 2013-03-01T02:00:00 Last Updated: 2024-08-06T14:18:09.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-0701.html - http://www.ruby-lang.org/en/news/2013/02/06/rdoc-xss-cve-2013-0256/ - http://secunia.com/advisories/52774 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00048.html - http://blog.segment
://secunia.com/advisories/52774 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00048.html - http://blog.segment7.net/2013/02/06/rdoc-xss-vulnerability-cve-2013-0256-releases-3-9-5-3-12-1-4-0-0-rc-2 - http://rhn.redhat.com/errata/RHSA-2013-0728.html - http://rhn.redhat.com/errata/RHSA-2013-0686.html - https://github.com/rdoc/rdoc/commit/ffa87887ee0517793df7541629a470e331f9fe60 - http://rhn.redhat.com/errata/RHSA-2013-0548.html - http://www.ubuntu.com/usn/USN-1733-1 - https://bugzilla.redhat.com/show_bug.cgi?id=907820 - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00015.html
CVE ID: CVE-2013-0257 State: PUBLISHED Published: 2013-03-27T21:00:00Z Last Updated: 2024-09-17T03:14:05.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: The email2image module 6.x-1.x and 6.x-2.x for Drupal does not properly restrict access to nodes, which allows remote attackers to read images of user email addresses and email fields. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1903264 - http://www.openwall.com/lists/oss-security/2013/02/05/1
CVE ID: CVE-2013-0258 State: PUBLISHED Published: 2013-03-27T21:00:00Z Last Updated: 2024-09-16T22:09:36.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Google Authenticator login (ga_login) module 7.x before 7.x-1.3 for Drupal, when multi-factor authentication is enabled, allows remote attackers to bypass authentication for accounts without an associated Google Authenticator token by logging in with the username. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1903282 - http://drupalcode.org/project/ga_login.git/commitdiff/50b032d - http://www.openwall.com/lists/oss-security/2013/02/05/1 - http://drupal.org/node/1902102
CVE ID: CVE-2013-0259 State: PUBLISHED Published: 2013-03-27T21:00:00 Last Updated: 2024-08-06T14:18:09.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Boxes module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with administer or edit boxes permissions to inject arbitrary web script or HTML via the subject parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/57642 - http://drupal.org/node/1897016 - http://www.openwall.com/lists/oss-security/2013/02/05/1 - http://drupalcode.org/project/boxes.git/commitdiff/456ff8e - http://drupal.org/node/1903300
CVE ID: CVE-2013-0260 State: PUBLISHED Published: 2013-03-27T21:00:00Z Last Updated: 2024-09-16T19:20:56.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Drush Debian Packaging module for Drupal allows local users to obtain database credentials via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1903324 - http://www.openwall.com/lists/oss-security/2013/02/05/1
CVE ID: CVE-2013-0261 State: PUBLISHED Published: 2013-03-08T21:00:00Z Last Updated: 2024-08-06T14:18:09.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: (1) installer/basedefs.py and (2) modules/ospluginutils.py in PackStack allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-0595.html - https://bugzilla.redhat.com/show_bug.cgi?id=908101
CVE ID: CVE-2013-0262 State: PUBLISHED Published: 2013-02-08T20:00:00 Last Updated: 2024-08-06T14:18:09.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: rack/file.rb (Rack::File) in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5 allows attackers to access arbitrary files outside the intended root directory via a crafted PATH_INFO environment variable, probably a directory traversal vulnerability that is remotely exploitable, aka "symlink path traversals." Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/#%21msg/rack-devel/mZsuRonD7G8/DpZIOmMLbOgJ - https://gist.github.com/rentzsch/4736940 - http://secunia.com/advisories/52033 - h
rack-devel/mZsuRonD7G8/DpZIOmMLbOgJ - https://gist.github.com/rentzsch/4736940 - http://secunia.com/advisories/52033 - http://rack.github.com/ - https://bugzilla.redhat.com/show_bug.cgi?id=909071 - https://groups.google.com/forum/#%21msg/rack-devel/bf937jPZxJM/1s6x95vIhmAJ - https://github.com/rack/rack/commit/6f237e4c9fab649d3750482514f0fde76c56ab30 - http://lists.opensuse.org/opensuse-updates/2013-03/msg00048.html - https://github.com/rack/rack/blob/master/lib/rack/file.rb#L56 - https://bugzilla.redhat.com/show_bug.cgi?id=909072
CVE ID: CVE-2013-0263 State: PUBLISHED Published: 2013-02-08T20:00:00 Last Updated: 2024-08-06T14:18:09.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rack::Session::Cookie in Rack 1.5.x before 1.5.2, 1.4.x before 1.4.5, 1.3.x before 1.3.10, 1.2.x before 1.2.8, and 1.1.x before 1.1.6 allows remote attackers to guess the session cookie, gain privileges, and execute arbitrary code via a timing attack involving an HMAC comparison function that does not run in constant time. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/52774 - https://groups.google.com/forum/#%21msg/rack-devel/mZsuRonD7G8/DpZIOmMLbOgJ - https://groups.google.com/
isories/52774 - https://groups.google.com/forum/#%21msg/rack-devel/mZsuRonD7G8/DpZIOmMLbOgJ - https://groups.google.com/forum/#%21msg/rack-devel/RnQxm6i13C4/xfakH81yWvgJ - https://github.com/rack/rack/commit/9a81b961457805f6d1a5c275d053068440421e11 - http://secunia.com/advisories/52033 - https://github.com/rack/rack/commit/0cd7e9aa397f8ebb3b8481d67dbac8b4863a7f07 - http://rack.github.com/ - http://secunia.com/advisories/52134 - https://groups.google.com/d/msg/rack-devel/xKrHVWeNvDM/4ZGA576CnK4J - https://bugzilla.redhat.com/show_bug.cgi?id=909071 - https://groups.google.com/forum/#%21msg/rack-devel/hz-liLb9fKE/8jvVWU6xYiYJ - https://groups.google.com/forum/#%21msg/rack-devel/bf937jPZxJM/1s6x
/forum/#%21msg/rack-devel/hz-liLb9fKE/8jvVWU6xYiYJ - https://groups.google.com/forum/#%21msg/rack-devel/bf937jPZxJM/1s6x95vIhmAJ - http://rhn.redhat.com/errata/RHSA-2013-0686.html - http://lists.opensuse.org/opensuse-updates/2013-03/msg00048.html - https://puppet.com/security/cve/cve-2013-0263 - https://gist.github.com/codahale/f9f3781f7b54985bee94 - https://twitter.com/coda/statuses/299732877745197056 - http://www.osvdb.org/89939 - http://www.debian.org/security/2013/dsa-2783
CVE ID: CVE-2013-0264 State: PUBLISHED Published: 2019-12-30T21:38:54 Last Updated: 2024-08-06T14:18:09.556Z Vendors: cumin Products: cumin Problem Types: General Configuration Problem Description: An import error was introduced in Cumin in the code refactoring in r5310. Server certificate validation is always disabled when connecting to Aviary servers, even if the installed packages on a system support it. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0264 - https://access.redhat.com/security/cve/cve-2013-0264
CVE ID: CVE-2013-0265 State: PUBLISHED Published: 2013-02-13T01:00:00Z Last Updated: 2024-09-17T03:19:04.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: The redirect_stderr function in xnbd_common.c in xnbd-server and xndb-wrapper in xNBD 0.1.0 allow local users to overwrite arbitrary files via a symlink attack on /tmp/xnbd.log. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/02/07/5 - http://www.osvdb.org/90008 - http://www.openwall.com/lists/oss-security/2013/02/06/2
CVE ID: CVE-2013-0266 State: PUBLISHED Published: 2013-03-08T21:00:00Z Last Updated: 2024-08-06T14:18:09.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: manifests/base.pp in the puppetlabs-cinder module, as used in PackStack, uses world-readable permissions for the (1) cinder.conf and (2) api-paste.ini configuration files, which allows local users to read OpenStack administrative passwords by reading the files. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=908581 - https://github.com/puppetlabs/puppetlabs-cinder/commit/7da792fbd40c0e6eae1ee093aa00e0b177bd2ebc - http://rhn.redhat.com/errata/RHSA-2013-0595.html
CVE ID: CVE-2013-0267 State: PUBLISHED Published: 2018-02-21T15:00:00 Last Updated: 2024-08-06T14:18:09.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Privileges portion of the web GUI and the XMLRPC API in Apache VCL 2.3.x before 2.3.2, 2.2.x before 2.2.2 and 2.1 allow remote authenticated users with nodeAdmin, manageGroup, resourceGrant, or userGrant permissions to gain privileges, cause a denial of service, or conduct cross-site scripting (XSS) attacks by leveraging improper data validation. Additional Analyst Notes: - CVE Program Container: References: - https://mail-archives.apache.org/mod_mbox/www-announce/201305.mbox/%3C1658214.8zndv4WEi7%40treebeard%3E - https://
es: - https://mail-archives.apache.org/mod_mbox/www-announce/201305.mbox/%3C1658214.8zndv4WEi7%40treebeard%3E - https://github.com/apache/vcl/commit/56c0f040056d6ad8693b20cfd3351367c2ffeabc#diff-2567a5ec9705eb7ac2c984033e06189d - https://lists.apache.org/thread.html/944592973c91cd106a42095271c3f6c7ab9c8d70077b8c6a8d4d92d0%40%3Ccommits.vcl.apache.org%3E - https://lists.apache.org/thread.html/632da9e45fce333f21782f1fe10b1d8e77a63811a34fe8e286dedc99%40%3Ccommits.vcl.apache.org%3E
CVE ID: CVE-2013-0268 State: PUBLISHED Published: 2013-02-18T02:00:00 Last Updated: 2024-08-06T14:18:09.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: The msr_open function in arch/x86/kernel/msr.c in the Linux kernel before 3.7.6 allows local users to bypass intended capability restrictions by executing a crafted application as root, as demonstrated by msr32.c. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html - http://www.openwall.com/lists/oss-security/2013/02/07/12 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c903f0456bc69176912dee6dd25c6a66ee1ae
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c903f0456bc69176912dee6dd25c6a66ee1aed00 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.6 - https://bugzilla.redhat.com/show_bug.cgi?id=908693 - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00018.html - https://github.com/torvalds/linux/commit/c903f0456bc69176912dee6dd25c6a66ee1aed00
CVE ID: CVE-2013-0269 State: PUBLISHED Published: 2013-02-13T01:00:00 Last Updated: 2024-08-06T14:18:09.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service (resource consumption) or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby symbols or certain internal objects, as demonstrated by conducting a SQL injection attack against Ruby on Rails, aka "Unsafe Object Creation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RH
reation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-0701.html - http://lists.opensuse.org/opensuse-updates/2013-04/msg00034.html - http://lists.apple.com/archives/security-announce/2013/Oct/msg00006.html - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2013&m=slackware-security.426862 - http://secunia.com/advisories/52774 - http://spreecommerce.com/blog/multiple-security-vulnerabilities-fixed - https://groups.google.com/group/rubyonrails-security/msg/d8e0db6e08c81428?dmode=source&output=gplain - http://www.osvdb.org/90074 - https://puppet.com/security/cve/cve-2013-0269 - http://secunia.com/adviso
e&output=gplain - http://www.osvdb.org/90074 - https://puppet.com/security/cve/cve-2013-0269 - http://secunia.com/advisories/52902 - http://rhn.redhat.com/errata/RHSA-2013-0686.html - http://www.securityfocus.com/bid/57899 - http://www.openwall.com/lists/oss-security/2013/02/11/7 - http://www.zweitag.de/en/blog/ruby-on-rails-vulnerable-to-mass-assignment-and-sql-injection - http://www.openwall.com/lists/oss-security/2013/02/11/8 - http://www.ubuntu.com/usn/USN-1733-1 - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00001.html - http://rhn.redhat.com/errata/RHSA-2013-1028.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/82010 - http://rhn.redhat.com/errata/RHSA-201
RHSA-2013-1028.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/82010 - http://rhn.redhat.com/errata/RHSA-2013-1147.html - http://weblog.rubyonrails.org/2013/2/11/SEC-ANN-Rails-3-2-12-3-1-11-and-2-3-17-have-been-released/ - http://secunia.com/advisories/52075 - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00015.html
CVE ID: CVE-2013-0270 State: PUBLISHED Published: 2013-04-12T22:00:00Z Last Updated: 2024-08-06T14:18:09.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Keystone Grizzly before 2013.1, Folsom, and possibly earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via a large HTTP request, as demonstrated by a long tenant_name when requesting a token. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/keystone/grizzly/2013.1 - https://github.com/openstack/keystone/commit/82c87e5638ebaf9f166a9b07a0155291276d6fdc - https://bugzilla.redhat.com/show_bug.cgi?id=909012 - https://github.com/openstack/keysto
baf9f166a9b07a0155291276d6fdc - https://bugzilla.redhat.com/show_bug.cgi?id=909012 - https://github.com/openstack/keystone/commit/7691276b869a86c2b75631d5bede9f61e030d9d8 - https://bugs.launchpad.net/keystone/+bug/1099025 - http://rhn.redhat.com/errata/RHSA-2013-0708.html
CVE ID: CVE-2013-0271 State: PUBLISHED Published: 2013-02-16T21:00:00 Last Updated: 2024-08-06T14:18:09.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MXit protocol plugin in libpurple in Pidgin before 2.10.7 might allow remote attackers to create or overwrite files via a crafted (1) mxit or (2) mxit/imagestrips pathname. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00003.html - http://www.ubuntu.com/usn/USN-1746-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18386 - http://hg.pidgin.im/pidgin/main/rev/a8aef1d340f2 - http://lists.opensuse.org/op
on/oval%3Aorg.mitre.oval%3Adef%3A18386 - http://hg.pidgin.im/pidgin/main/rev/a8aef1d340f2 - http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00006.html - http://www.pidgin.im/news/security/?id=65
CVE ID: CVE-2013-0272 State: PUBLISHED Published: 2013-02-16T21:00:00 Last Updated: 2024-08-06T14:18:09.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00003.html - http://www.ubuntu.com/usn/USN-1746-1 - http://hg.pidgin.im/pidgin/main/rev/879db2a9a59c - http://www.securityfocus.com/bid/57951 - http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00006.html - https://oval.cisecu
tyfocus.com/bid/57951 - http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00006.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17474 - http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00007.html - http://www.pidgin.im/news/security/?id=66
CVE ID: CVE-2013-0273 State: PUBLISHED Published: 2013-02-16T21:00:00 Last Updated: 2024-08-06T14:18:09.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: sametime.c in the Sametime protocol plugin in libpurple in Pidgin before 2.10.7 does not properly terminate long user IDs, which allows remote servers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00003.html - http://www.ubuntu.com/usn/USN-1746-1 - http://www.pidgin.im/news/security/?id=67 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%