Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ts/oss-security/2011/10/06/3 - http://www.debian.org/security/2011/dsa-2323 - https://github.com/reubenhwk/radvd/commit/92e22ca23e52066da2258df8c76a2dca8a428bcc - http://www.litech.org/radvd/CHANGES - http://www.ubuntu.com/usn/USN-1257-1
CVE ID: CVE-2011-3603 State: PUBLISHED Published: 2014-04-27T21:00:00 Last Updated: 2024-08-06T23:37:48.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: The router advertisement daemon (radvd) before 1.8.2 does not properly handle errors in the privsep_init function, which causes the radvd daemon to run as root and has an unspecified impact. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/10/06/3 - http://www.litech.org/radvd/CHANGES - https://access.redhat.com/security/cve/CVE-2011-3603
CVE ID: CVE-2011-3604 State: PUBLISHED Published: 2014-02-17T16:00:00 Last Updated: 2024-08-06T23:37:48.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: The process_ra function in the router advertisement daemon (radvd) before 1.8.2 allows remote attackers to cause a denial of service (stack-based buffer over-read and crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/10/06/3 - http://www.debian.org/security/2011/dsa-2323 - http://www.litech.org/radvd/CHANGES - http://www.ubuntu.com/usn/USN-1257-1
CVE ID: CVE-2011-3605 State: PUBLISHED Published: 2014-02-17T16:00:00 Last Updated: 2024-08-06T23:37:48.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: The process_rs function in the router advertisement daemon (radvd) before 1.8.2, when UnicastOnly is enabled, allows remote attackers to cause a denial of service (temporary service hang) via a large number of ND_ROUTER_SOLICIT requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/10/06/3 - http://www.debian.org/security/2011/dsa-2323 - http://www.litech.org/radvd/CHANGES - http://www.ubuntu.com/usn/USN-1257-1
CVE ID: CVE-2011-3606 State: PUBLISHED Published: 2019-11-26T01:43:14 Last Updated: 2024-08-06T23:37:48.614Z Vendors: JBoss Application Server Products: JBoss Application Server Problem Types: Cross-Site Scripting Description: A DOM based cross-site scripting flaw was found in the JBoss Application Server 7 before 7.1.0 Beta 1 administration console. A remote attacker could provide a specially-crafted web page and trick the valid JBoss AS user, with the administrator privilege, to visit it, which would lead into the DOM environment modification and arbitrary HTML or web script execution. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/trac
ipt execution. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-3606 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3606 - https://access.redhat.com/security/cve/cve-2011-3606
CVE ID: CVE-2011-3607 State: PUBLISHED Published: 2011-11-08T11:00:00 Last Updated: 2024-08-06T23:37:48.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when the mod_setenvif module is enabled, allows local users to gain privileges via a .htaccess file with a crafted SetEnvIf directive, in conjunction with a crafted HTTP request header, leading to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://marc.info/?l=bug
References: - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://marc.info/?l=bugtraq&m=134987041210674&w=2 - https://bugs.launchpad.net/ubuntu/+source/apache2/+bug/811422 - http://www.halfdog.net/Security/2011/ApacheModSetEnvIfIntegerOverflow/DemoExploit.html - http://rhn.redhat.com/errata/RHSA-2012-0543.html - http://marc.info/?l=bugtraq&m=134987041210674&w=2 - https://bugzilla.redhat.com/show_bug.cgi?id=750935 - http://marc.info/?l=bugtraq&m=133294460209056&w=2 - http://rhn.redhat.com/errata/RHSA-2012-0128.html - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://secunia.com/advisories/45793 - http://marc.info/?l=bugtr
om/technetwork/topics/security/cpujan2015-1972971.html - http://secunia.com/advisories/45793 - http://marc.info/?l=bugtraq&m=133294460209056&w=2 - http://www.securityfocus.com/bid/50494 - http://rhn.redhat.com/errata/RHSA-2012-0542.html - http://securitytracker.com/id?1026267 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html - http://support.apple.com/kb/HT5501 - http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html - http://www.fujitsu.com/global/support/software/security/products-f/interstage-201303e.html - http://archives.neohapsis.com/archives/fulldisclosure/2011-11/0023.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objec
psis.com/archives/fulldisclosure/2011-11/0023.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://www.halfdog.net/Security/2011/ApacheModSetEnvIfIntegerOverflow/ - http://www.osvdb.org/76744 - http://marc.info/?l=bugtraq&m=133494237717847&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 - http://secunia.com/advisories/48551 - http://www.debian.org/security/2012/dsa-2405 - http://marc.info/?l=bugtraq&m=133494237717847&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71093 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:003 - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e0593
curity/advisories?name=MDVSA-2012:003 - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.ht
608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.
.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r688df6f16f141e966a0a47f817e559312b3da27886f59116a94b273d%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re2e23465bbdb17ffe109d21b4f192e6b58221cd7aa8797d530b4cd75%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r1d201e3da31a2c8aa870c8
2e6b58221cd7aa8797d530b4cd75%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r1d201e3da31a2c8aa870c8314623caef7debd74a13d0f25205e26f15%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E - https://li
ache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2011-3608 State: REJECTED Published: 2017-07-24T16:00:00 Last Updated: 2017-07-24T15:57:01 Description: No description available.
CVE ID: CVE-2011-3609 State: PUBLISHED Published: 2019-11-26T02:03:48 Last Updated: 2024-08-06T23:37:48.463Z Vendors: JBoss Application Server Products: JBoss Application Server Problem Types: Cross-Site Request Forgery Description: A CSRF issue was found in JBoss Application Server 7 before 7.1.0. JBoss did not properly restrict access to the management console information (for example via the "Access-Control-Allow-Origin" HTTP access control flag). This can lead to unauthorized information leak if a user with admin privileges visits a specially-crafted web page provided by a remote attacker. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.or
y a remote attacker. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-3609 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3609 - https://access.redhat.com/security/cve/cve-2011-3609 - https://www.securityfocus.com/bid/50888
CVE ID: CVE-2011-3610 State: PUBLISHED Published: 2020-01-22T15:43:42 Last Updated: 2024-08-06T23:37:48.381Z Vendors: Serendipity Products: serendipity freetag plugin Problem Types: XSS Description: A Cross-site Scripting (XSS) vulnerability exists in the Serendipity freetag plugin before 3.30 in the tagcloud parameter to plugins/serendipity_event_freetag/tagcloud.swf. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2011/10/10/3 - https://packetstormsecurity.com/files/105054/Secunia-Security-Advisory-46005.html - https://git.schokokeks.org/freewvs.git/blob/ddc4be296c9c49987b53be064d6d2a9d12f50452/freewvsdb/plugins.freewvs
CVE ID: CVE-2011-3611 State: PUBLISHED Published: 2020-01-22T16:03:07 Last Updated: 2024-08-06T23:37:48.373Z Vendors: UseBB Products: UseBB Problem Types: Local File Inclusion Description: A File Inclusion vulnerability exists in act parameter to admin.php in UseBB before 1.0.12. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2011/10/10/4 - https://packetstormsecurity.com/files/100103/UseBB-1.0.11-Cross-Site-Request-Forgery-Local-File-Inclusion.html - https://www.immuniweb.com/advisory/HTB22913
CVE ID: CVE-2011-3612 State: PUBLISHED Published: 2020-01-22T17:06:01 Last Updated: 2024-08-06T23:37:48.507Z Vendors: UseBB Products: UseBB Problem Types: CSRF Description: Cross-Site Request Forgery (CSRF) vulnerability exists in panel.php in UseBB before 1.0.12. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2011/10/10/4 - https://packetstormsecurity.com/files/100103/UseBB-1.0.11-Cross-Site-Request-Forgery-Local-File-Inclusion.html - https://www.immuniweb.com/advisory/HTB22913
CVE ID: CVE-2011-3613 State: PUBLISHED Published: 2020-01-22T17:19:54 Last Updated: 2024-08-06T23:37:48.588Z Vendors: Vanilla Products: Vanilla Forums Problem Types: cookie theft Description: An issue exists in Vanilla Forums before 2.0.17.9 due to the way cookies are handled. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2011/10/10/5 - https://packetstormsecurity.com/files/105853/Secunia-Security-Advisory-46387.html
CVE ID: CVE-2011-3614 State: PUBLISHED Published: 2020-01-22T17:27:15 Last Updated: 2024-08-06T23:37:48.628Z Vendors: Vanilla Products: Vanilla Forums Problem Types: incorrect access control Description: An Access Control vulnerability exists in the Facebook, Twitter, and Embedded plugins in Vanilla Forums before 2.0.17.9. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2011/10/10/5 - https://packetstormsecurity.com/files/105853/Secunia-Security-Advisory-46387.html
CVE ID: CVE-2011-3615 State: PUBLISHED Published: 2011-10-24T17:00:00 Last Updated: 2024-08-06T23:37:48.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Simple Machines Forum (SMF) before 1.1.15 and 2.x before 2.0.1 allow remote attackers to execute arbitrary SQL commands via vectors involving a (1) HTML entity or (2) display name. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/70617 - http://secunia.com/advisories/46386 - http://openwall.com/lists/oss-security/2011/10/10/6 - http://openwall.com/
70617 - http://secunia.com/advisories/46386 - http://openwall.com/lists/oss-security/2011/10/10/6 - http://openwall.com/lists/oss-security/2011/10/09/3 - http://www.simplemachines.org/community/index.php?topic=452888.0
CVE ID: CVE-2011-3616 State: PUBLISHED Published: 2011-11-04T21:00:00Z Last Updated: 2024-08-06T23:37:48.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: The getSkillname function in the eve module in Conky 1.8.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on /tmp/.cesf. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43225 - https://bugs.launchpad.net/ubuntu/+source/conky/+bug/607309 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=612033 - http://www.openwall.com/lists/oss-security/2011/10/09/4 - http://www.openwall.com/lists/oss-security/2011/10/10/8 - http://secunia.com/advisories/46353 -
-security/2011/10/09/4 - http://www.openwall.com/lists/oss-security/2011/10/10/8 - http://secunia.com/advisories/46353 - http://www.gentoo.org/security/en/glsa/glsa-201110-09.xml
CVE ID: CVE-2011-3617 State: PUBLISHED Published: 2019-11-26T02:34:07 Last Updated: 2024-08-06T23:37:48.610Z Vendors: Tahoe-LAFS Products: Tahoe-LAFS Problem Types: Other Description: Tahoe-LAFS v1.3.0 through v1.8.2 could allow unauthorized users to delete immutable files in some cases. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-3617 - https://access.redhat.com/security/cve/cve-2011-3617 - https://people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-3617.html
CVE ID: CVE-2011-3618 State: PUBLISHED Published: 2019-11-12T14:25:15 Last Updated: 2024-08-06T23:37:48.651Z Vendors: atop Products: atop Problem Types: insecure tempfile handling Description: atop: symlink attack possible due to insecure tempfile handling Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3618 - https://security-tracker.debian.org/tracker/CVE-2011-3618 - https://access.redhat.com/security/cve/cve-2011-3618
CVE ID: CVE-2011-3619 State: PUBLISHED Published: 2013-06-08T10:00:00Z Last Updated: 2024-08-06T23:37:48.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: The apparmor_setprocattr function in security/apparmor/lsm.c in the Linux kernel before 3.0 does not properly handle invalid parameters, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact by writing to a /proc/#####/attr/current file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/a5b2c5b2ad5853591a6cac6134cd0f599a720865 - http://ftp.osuosl.org/pub/linux/kernel/v3.0/ChangeLog-3.0 - http:/
nux/commit/a5b2c5b2ad5853591a6cac6134cd0f599a720865 - http://ftp.osuosl.org/pub/linux/kernel/v3.0/ChangeLog-3.0 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a5b2c5b2ad5853591a6cac6134cd0f599a720865 - http://www.openwall.com/lists/oss-security/2011/10/17/6
CVE ID: CVE-2011-3620 State: PUBLISHED Published: 2012-05-03T23:00:00 Last Updated: 2024-08-06T23:37:48.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to obtain access to the messaging functionality and job functionality of a cluster by leveraging knowledge of a cluster-username. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49000 - https://issues.apache.org/jira/browse/QPID-3652 - https://bugzilla.redhat.com/show_bug.cgi?id=747078 - https://reviews.apache.org/r/2988/ - http://www.securitytracker.com/id?1026990
CVE ID: CVE-2011-3621 State: PUBLISHED Published: 2020-01-22T17:44:17 Last Updated: 2024-08-06T23:37:48.681Z Vendors: FluxBB Products: FluxBB Problem Types: mishandles reverse proxying Description: A reverse proxy issue exists in FluxBB before 1.4.7 when FORUM_BEHIND_REVERSE_PROXY is enabled. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2011/10/18/8 - https://fluxbb.org/forums/viewtopic.php?id=5751
CVE ID: CVE-2011-3622 State: PUBLISHED Published: 2020-01-22T19:48:47 Last Updated: 2024-08-06T23:37:48.680Z Vendors: Phorum Products: Phorum Problem Types: XSS Description: A Cross-Site Scripting (XSS) vulnerability exists in the admin login screen in Phorum before 5.2.18. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2011/10/18/9 - https://www.phorum.org/phorum5/read.php?64%2C149588
CVE ID: CVE-2011-3623 State: PUBLISHED Published: 2014-12-26T20:00:00 Last Updated: 2024-08-06T23:37:48.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in VideoLAN VLC media player before 1.0.2 allow remote attackers to execute arbitrary code via (1) a crafted ASF file, related to the ASF_ObjectDumpDebug function in modules/demux/asf/libasf.c; (2) a crafted AVI file, related to the AVI_ChunkDumpDebug_level function in modules/demux/avi/libavi.c; or (3) a crafted MP4 file, related to the __MP4_BoxDumpStructure function in modules/demux/mp4/libmp4.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.videolan.org/se
modules/demux/mp4/libmp4.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.videolan.org/security/sa0901.html - https://bugs.gentoo.org/show_bug.cgi?id=285370 - http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=c5b02d011b8c634d041167f4d2936b55eca4d18d - http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=861e374d03e6c60c7d3c98428c632fe3b9e371b2 - http://openwall.com/lists/oss-security/2011/10/18/10 - http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=dfe7084e8cc64e9b7a87cd37065b59cba2064823
CVE ID: CVE-2011-3624 State: PUBLISHED Published: 2019-11-26T02:50:40 Last Updated: 2024-08-06T23:37:48.555Z Vendors: Ruby Products: Ruby Problem Types: UNKNOWN_TYPE Description: Various methods in WEBrick::HTTPRequest in Ruby 1.9.2 and 1.8.7 and earlier do not validate the X-Forwarded-For, X-Forwarded-Host and X-Forwarded-Server headers in requests, which might allow remote attackers to inject arbitrary text into log files or bypass intended address parsing via a crafted header. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-3624 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3624 - https://access.redhat.com/secu
n.org/tracker/CVE-2011-3624 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3624 - https://access.redhat.com/security/cve/cve-2011-3624 - https://redmine.ruby-lang.org/issues/5418
CVE ID: CVE-2011-3625 State: PUBLISHED Published: 2014-06-11T14:00:00 Last Updated: 2024-08-06T23:37:48.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the sub_read_line_sami function in subreader.c in MPlayer, as used in SMPlayer 0.6.9, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a SAMI subtitle file. Additional Analyst Notes: - CVE Program Container: References: - https://labs.mwrinfosecurity.com/system/assets/149/original/mwri_mplayer-sami-subtitles_2011-08-12.pdf - http://www.openwall.com/lists/oss-security/2011/10/18/12 - http://secunia.com/advisories/55486 - http://s
11-08-12.pdf - http://www.openwall.com/lists/oss-security/2011/10/18/12 - http://secunia.com/advisories/55486 - http://security.gentoo.org/glsa/glsa-201310-13.xml - http://git.mplayer2.org/mplayer2/commit/?id=27b88a09c5319deb62221b8cd0ecc14cd1136e4a
CVE ID: CVE-2011-3626 State: PUBLISHED Published: 2012-01-27T15:00:00Z Last Updated: 2024-09-17T03:12:50.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the prepare_exec function in src/exec.c in Logsurfer 1.5b and earlier, and Logsurfer+ 1.7 and earlier, allows remote attackers to execute arbitrary commands via crafted strings in a log file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/46389 - http://www.openwall.com/lists/oss-security/2011/10/17/2 - http://www.openwall.com/lists/oss-security/2011/10/17/4 - https://bugs.gentoo.org/show_bug.cgi?id=387397 - http://secunia.com/advisories/47725 - http
/oss-security/2011/10/17/4 - https://bugs.gentoo.org/show_bug.cgi?id=387397 - http://secunia.com/advisories/47725 - http://security.gentoo.org/glsa/glsa-201201-04.xml
CVE ID: CVE-2011-3627 State: PUBLISHED Published: 2011-11-17T19:00:00Z Last Updated: 2024-08-06T23:37:48.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bytecode engine in ClamAV before 0.97.3 allows remote attackers to cause a denial of service (crash) via vectors related to "recursion level" and (1) libclamav/bytecode.c and (2) libclamav/bytecode_api.c. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2011-November/068942.html - https://bugzilla.redhat.com/show_bug.cgi?id=746984 - http://www.securityfocus.com/bid/50183 - http://secunia.com/advisories/46717 - http://secunia.com/advisories/46826 - h
- http://www.securityfocus.com/bid/50183 - http://secunia.com/advisories/46717 - http://secunia.com/advisories/46826 - http://lists.fedoraproject.org/pipermail/package-announce/2011-November/068940.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-November/068941.html - http://www.ubuntu.com/usn/USN-1258-1 - http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=commitdiff%3Bh=3d664817f6ef833a17414a4ecea42004c35cc42f - http://www.openwall.com/lists/oss-security/2011/10/18/1
CVE ID: CVE-2011-3628 State: PUBLISHED Published: 2014-04-15T18:00:00 Last Updated: 2024-08-06T23:37:48.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in pam_motd (aka the MOTD module) in libpam-modules before 1.1.3-2ubuntu2.1 on Ubuntu 11.10, before 1.1.2-2ubuntu8.4 on Ubuntu 11.04, before 1.1.1-4ubuntu2.4 on Ubuntu 10.10, before 1.1.1-2ubuntu5.4 on Ubuntu 10.04 LTS, and before 0.99.7.1-5ubuntu6.5 on Ubuntu 8.04 LTS, when using certain configurations such as "session optional pam_motd.so", allows local users to gain privileges by modifying the PATH environment variable to reference a malicious command, as demonstrated via uname. Additiona