Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-4314 State: PUBLISHED Published: 2017-03-11T06:46:00 Last Updated: 2024-08-07T03:43:13.676Z Vendors: n/a Products: Novell iPrint webrowser ActiveX plugin Problem Types: buffer overflow Description: Remote attackers can use the iPrint web-browser ActiveX plugin in Novell iPrint Client before 5.42 for Windows XP/Vista/Win7 to execute code by overflowing the "name" parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.novell.com/support/kb/doc.php?id=7006675
CVE ID: CVE-2010-4321 State: PUBLISHED Published: 2010-12-30T18:00:00 Last Updated: 2024-08-07T03:43:13.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in an ActiveX control in ienipp.ocx in Novell iPrint Client 5.52 allows remote attackers to execute arbitrary code via a long argument to (1) the GetDriverSettings2 method, as reachable by (2) the GetDriverSettings method. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8125 - http://www.novell.com/support/viewContent.do?externalId=7007234 - http://www.securityfocus.com/bid/44966 - http://www.exploit-db.com/exploits/16014 - http://www.zerodayi
rnalId=7007234 - http://www.securityfocus.com/bid/44966 - http://www.exploit-db.com/exploits/16014 - http://www.zerodayinitiative.com/advisories/ZDI-10-256/
CVE ID: CVE-2010-4322 State: PUBLISHED Published: 2011-01-07T22:00:00 Last Updated: 2024-08-07T03:43:14.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in gwtTeaming.rpc in Novell Vibe OnPrem 3 BETA allows remote authenticated users to inject arbitrary web script or HTML via the Micro Blog (aka What Are You Working On?) field. Additional Analyst Notes: - CVE Program Container: References: - http://www.solutionary.com/index/SERT/Vuln-Disclosures/Novell-Vibe-Beta-3-XSS-vulnerability.html - http://www.securityfocus.com/archive/1/515147/100/0/threaded
CVE ID: CVE-2010-4323 State: PUBLISHED Published: 2011-02-18T23:00:00 Last Updated: 2024-08-07T03:43:14.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in novell-tftp.exe in Novell ZENworks Configuration Manager (ZCM) 10.3.1, 10.3.2, and 11.0, and earlier versions, allows remote attackers to execute arbitrary code via a long TFTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46434 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65438 - http://www.vupen.com/english/advisories/2011/0425 - http://www.securityfocus.com/archive/1/516524/100/0/threaded - http://www.novell.com/support/view
advisories/2011/0425 - http://www.securityfocus.com/archive/1/516524/100/0/threaded - http://www.novell.com/support/viewContent.do?externalId=7007896 - http://www.zerodayinitiative.com/advisories/ZDI-11-089 - http://securityreason.com/securityalert/8094 - http://www.securitytracker.com/id?1025092 - http://secunia.com/advisories/43379 - http://securityreason.com/securityalert/8092
CVE ID: CVE-2010-4324 State: PUBLISHED Published: 2011-01-07T18:00:00 Last Updated: 2024-08-07T03:43:13.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Approval Form in the User Application in the Roles Based Provisioning Module 3.7.0 before 370D in Novell Identity Manager (aka IDM) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/70298 - http://www.vupen.com/english/advisories/2011/0038 - http://www.securityfocus.com/bid/45692 - http://secunia.com/advisories/42819 - http://www.securitytracker.com/id?1024941 -
tp://www.securityfocus.com/bid/45692 - http://secunia.com/advisories/42819 - http://www.securitytracker.com/id?1024941 - https://bugzilla.novell.com/show_bug.cgi?id=653516 - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5085293.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/64501
CVE ID: CVE-2010-4325 State: PUBLISHED Published: 2011-01-28T20:29:00 Last Updated: 2024-08-07T03:43:14.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP2 allows remote attackers to execute arbitrary code via a crafted TZID variable in a VCALENDAR message. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.novell.com/show_bug.cgi?id=657818 - http://www.zerodayinitiative.com/advisories/ZDI-11-027/ - http://osvdb.org/70676 - https://bugzilla.novell.com/show_bug.cgi?id=685304 - http://www.securityfocus.com/archive/1/516002/100/0/threaded - http://www.no
ugzilla.novell.com/show_bug.cgi?id=685304 - http://www.securityfocus.com/archive/1/516002/100/0/threaded - http://www.novell.com/support/viewContent.do?externalId=7007638&sliceId=1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64928 - http://www.vupen.com/english/advisories/2011/0220 - http://secunia.com/advisories/43089 - http://www.securityfocus.com/bid/46025 - https://labs.idefense.com/verisign/intelligence/2009/vulnerabilities/display.php?id=944 - http://www.novell.com/support/viewContent.do?externalId=7009212
CVE ID: CVE-2010-4326 State: PUBLISHED Published: 2011-01-28T20:29:00 Last Updated: 2024-08-07T03:43:14.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via variables in a VCALENDAR message, as demonstrated by a long (1) REQUEST-STATUS, (2) TZNAME, (3) COMMENT, or (4) RRULE variable in this message. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.novell.com/show_bug.cgi?id=642340 - http://www.securityfocus.com/bid/45994 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64929 - https:
id=642340 - http://www.securityfocus.com/bid/45994 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64929 - https://bugzilla.novell.com/show_bug.cgi?id=642339 - https://bugzilla.novell.com/show_bug.cgi?id=642349 - https://bugzilla.novell.com/show_bug.cgi?id=642345 - http://www.facebook.com/note.php?note_id=477865030928 - http://zerodayinitiative.com/advisories/ZDI-10-239/ - http://www.novell.com/support/viewContent.do?externalId=7007155&sliceId=1 - http://www.zerodayinitiative.com/advisories/ZDI-11-025/ - http://www.vupen.com/english/advisories/2011/0219 - http://zerodayinitiative.com/advisories/ZDI-10-240/ - http://zerodayinitiative.com/advisories/ZDI-10-243/
CVE ID: CVE-2010-4327 State: PUBLISHED Published: 2011-02-10T17:00:00 Last Updated: 2024-08-07T03:43:14.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the NCP service in Novell eDirectory 8.8.5 before 8.8.5.6 and 8.8.6 before 8.8.6.2 allows remote attackers to cause a denial of service (hang) via a malformed FileSetLock request to port 524. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/viewContent.do?externalId=7007781&sliceId=2 - http://www.vupen.com/english/advisories/2011/0305 - http://secunia.com/advisories/43186 - http://www.securityfocus.com/bid/46263 - http://securityreason.com/securityalert
- http://secunia.com/advisories/43186 - http://www.securityfocus.com/bid/46263 - http://securityreason.com/securityalert/8071 - http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-novell - http://www.securityfocus.com/archive/1/516279/100/0/threaded - http://www.zerodayinitiative.com/advisories/ZDI-11-060
CVE ID: CVE-2010-4328 State: PUBLISHED Published: 2011-02-18T23:00:00 Last Updated: 2024-08-07T03:43:14.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in opt/novell/iprint/bin/ipsmd in Novell iPrint for Linux Open Enterprise Server 2 SP2 and SP3 allow remote attackers to execute arbitrary code via unspecified LPR opcodes. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/70852 - http://secunia.com/advisories/43281 - http://www.novell.com/support/viewContent.do?externalId=7007858&sliceId=1 - http://download.novell.com/Download?buildid=KloKR_CmrBs~ - http://www.securitytracker.com/id?1025074 - http://securit
- http://download.novell.com/Download?buildid=KloKR_CmrBs~ - http://www.securitytracker.com/id?1025074 - http://securityreason.com/securityalert/8096 - http://www.securityfocus.com/archive/1/516506/100/0/threaded - http://www.vupen.com/english/advisories/2011/0353 - http://www.securityfocus.com/bid/46309 - http://www.zerodayinitiative.com/advisories/ZDI-11-087
CVE ID: CVE-2010-4329 State: PUBLISHED Published: 2010-12-02T16:00:00 Last Updated: 2024-08-07T03:43:14.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the PMA_linkOrButton function in libraries/common.lib.php in the database (db) search script in phpMyAdmin 2.11.x before 2.11.11.1 and 3.x before 3.3.8.1 allows remote attackers to inject arbitrary web script or HTML via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpmyadmin.net/home_page/security/PMASA-2010-8.php - http://www.mandriva.com/security/advisories?name=MDVSA-2010:244 - http://www.vupen.com/english/advisories/2011/0001 - h
http://www.mandriva.com/security/advisories?name=MDVSA-2010:244 - http://www.vupen.com/english/advisories/2011/0001 - http://www.securityfocus.com/bid/45100 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051956.html - http://www.debian.org/security/2010/dsa-2139 - http://secunia.com/advisories/42477 - http://www.vupen.com/english/advisories/2010/3082 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051942.html - http://www.osvdb.org/69516 - http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commitdiff%3Bh=e1f4901ffc400b6d2df15eac0ba5015fe48a27c4 - http://www.vupen.com/english/advisories/2010/3087 - http://www.
ommitdiff%3Bh=e1f4901ffc400b6d2df15eac0ba5015fe48a27c4 - http://www.vupen.com/english/advisories/2010/3087 - http://www.vupen.com/english/advisories/2010/3158 - http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commitdiff%3Bh=4341818d73d454451f024950a4ce0141608ac7f8 - http://secunia.com/advisories/42725 - http://secunia.com/advisories/42408
CVE ID: CVE-2010-4330 State: PUBLISHED Published: 2010-12-07T01:00:00 Last Updated: 2024-08-07T03:43:14.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in includes/controller.php in Pulse CMS Basic before 1.2.9 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the p parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/69622 - http://secunia.com/advisories/42462 - http://www.vupen.com/english/advisories/2010/3128 - http://pulsecms.com/release-notes.php - http://www.securityfocus.com/archive/1/515029/100/0/threaded - http://www.securityfocus.com/bid/45
m/release-notes.php - http://www.securityfocus.com/archive/1/515029/100/0/threaded - http://www.securityfocus.com/bid/45186 - http://www.uncompiled.com/2010/12/pulse-cms-basic-local-file-inclusion-vulnerability-cve-2010-4330/ - http://www.exploit-db.com/exploits/15691
CVE ID: CVE-2010-4331 State: PUBLISHED Published: 2011-01-20T18:00:00 Last Updated: 2024-08-07T03:43:14.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Seo Panel 2.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) default_news or (2) sponsors cookies, which are not properly handled by (a) controllers/index.ctrl.php or (b) controllers/settings.ctrl.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64725 - http://www.securityfocus.com/bid/45828 - http://www.uncompiled.com/2011/01/seo-panel-cookie-rendered-persistent-xss-vuln
http://www.securityfocus.com/bid/45828 - http://www.uncompiled.com/2011/01/seo-panel-cookie-rendered-persistent-xss-vulnerability-cve-2010-4331/ - http://www.exploit-db.com/exploits/16000 - http://www.securityfocus.com/archive/1/515768/100/0/threaded
CVE ID: CVE-2010-4332 State: PUBLISHED Published: 2010-12-22T01:00:00 Last Updated: 2024-08-07T03:43:14.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pointter PHP Content Management System 1.0 allows remote attackers to bypass authentication and obtain administrative privileges via arbitrary values of the auser and apass cookies. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15740 - http://secunia.com/advisories/42662 - http://www.securityfocus.com/archive/1/515314/100/0/threaded - http://www.uncompiled.com/2010/12/pointter-php-content-management-system-unauthorized-privilege-escalation-cve-2010-4332/
CVE ID: CVE-2010-4333 State: PUBLISHED Published: 2010-12-22T01:00:00 Last Updated: 2024-08-07T03:43:14.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pointter PHP Micro-Blogging Social Network 1.8 allows remote attackers to bypass authentication and obtain administrative privileges via arbitrary values of the auser and apass cookies. Additional Analyst Notes: - CVE Program Container: References: - http://www.uncompiled.com/2010/12/pointter-php-micro-blogging-social-network-unauthorized-privilege-escalation-cve-2010-4333/ - http://www.securityfocus.com/archive/1/515306/100/0/threaded - http://www.exploit-db.com/exploits/15741
CVE ID: CVE-2010-4334 State: PUBLISHED Published: 2011-01-14T00:00:00 Last Updated: 2024-08-07T03:43:14.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IO::Socket::SSL module 1.35 for Perl, when verify_mode is not VERIFY_NONE, fails open to VERIFY_NONE instead of throwing an error when a ca_file/ca_path cannot be verified, which allows remote attackers to bypass intended certificate restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42757 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052601.html - http://cpansearch.perl.org/src/SULLR/IO-Socket-SSL-1.35/Changes - http://www.securityfocus.
/2010-December/052601.html - http://cpansearch.perl.org/src/SULLR/IO-Socket-SSL-1.35/Changes - http://www.securityfocus.com/bid/45189 - http://osvdb.org/69626 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052594.html - http://www.openwall.com/lists/oss-security/2010/12/09/8 - http://www.openwall.com/lists/oss-security/2010/12/24/1 - http://secunia.com/advisories/42508 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:092 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=606058
CVE ID: CVE-2010-4335 State: PUBLISHED Published: 2011-01-14T22:00:00 Last Updated: 2024-08-07T03:43:14.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to modify the internal Cake cache and execute arbitrary code via a crafted data[_Token][fields] value that is processed by the unserialize function, as demonstrated by modifying the file_map cache to execute arbitrary local files. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cakephp/cakephp/commit/e431e86aa4301ced4273dc7919b59362cbb353cb - http://www.explo
ner: References: - https://github.com/cakephp/cakephp/commit/e431e86aa4301ced4273dc7919b59362cbb353cb - http://www.exploit-db.com/exploits/16011 - http://packetstormsecurity.org/files/view/95847/burnedcake.py.txt - http://www.osvdb.org/69352 - http://securityreason.com/securityalert/8026 - http://malloc.im/CakePHP-unserialize.txt - http://secunia.com/advisories/42211
CVE ID: CVE-2010-4336 State: PUBLISHED Published: 2010-12-17T18:00:00 Last Updated: 2024-08-07T03:43:14.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cu_rrd_create_file function (src/utils_rrdcreate.c) in collectd 4.x before 4.9.4 and before 4.10.2 allow remote attackers to cause a denial of service (assertion failure) via a packet with a timestamp whose value is 10 or less, as demonstrated by creating RRD files using the (1) RRDtool and (2) RRDCacheD plugins. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html - http://secunia.com/advisories/42491 - http://www.debian.org/security/20
ensuse-security-announce/2011-05/msg00005.html - http://secunia.com/advisories/42491 - http://www.debian.org/security/2010/dsa-2133 - http://secunia.com/advisories/42846 - http://www.vupen.com/english/advisories/2011/0041 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=605092 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052875.html - http://www.vupen.com/english/advisories/2010/3196 - http://collectd.org/news.shtml#news86 - http://www.securityfocus.com/bid/45075 - http://secunia.com/advisories/42393
CVE ID: CVE-2010-4337 State: PUBLISHED Published: 2011-01-14T22:00:00 Last Updated: 2024-08-07T03:43:14.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: The configure script in gnash 0.8.8 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/gnash-configure-errors.$$, (2) /tmp/gnash-configure-warnings.$$, or (3) /tmp/gnash-configure-recommended.$$ files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45102 - http://secunia.com/advisories/42416 - http://www.debian.org/security/2012/dsa-2435 - http://www.osvdb.org/69533 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=605419 - http://secunia.com
012/dsa-2435 - http://www.osvdb.org/69533 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=605419 - http://secunia.com/advisories/48466
CVE ID: CVE-2010-4338 State: PUBLISHED Published: 2011-01-20T18:00:00 Last Updated: 2024-08-07T03:43:14.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: ocrodjvu 0.4.6-1 on Debian GNU/Linux allows local users to modify arbitrary files via a symlink attack on temporary files that are generated when Cuneiform is invoked as the OCR engine. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598134 - http://www.securityfocus.com/bid/45234 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64892
CVE ID: CVE-2010-4339 State: PUBLISHED Published: 2011-01-14T22:00:00Z Last Updated: 2024-09-16T19:14:16.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Hypermail 2.2.0 allows remote attackers to inject arbitrary web script or HTML via a crafted From address, which is not properly handled when indexing messages. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598743
CVE ID: CVE-2010-4340 State: PUBLISHED Published: 2011-09-11T20:00:00Z Last Updated: 2024-09-17T01:35:31.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: libcloud before 0.4.1 does not verify SSL certificates for HTTPS connections, which allows remote attackers to spoof certificates and bypass intended access restrictions via a man-in-the-middle (MITM) attack. Additional Analyst Notes: - CVE Program Container: References: - http://mail-archives.apache.org/mod_mbox/incubator-libcloud/201009.mbox/%3C5860913.463891285776633273.JavaMail.jira%40thor%3E - http://wiki.apache.org/incubator/LibcloudSSL - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598463 - http://mail-archives.apa
ki.apache.org/incubator/LibcloudSSL - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598463 - http://mail-archives.apache.org/mod_mbox/incubator-libcloud/201011.mbox/browser - https://issues.apache.org/jira/browse/LIBCLOUD-55
CVE ID: CVE-2010-4341 State: PUBLISHED Published: 2011-01-25T00:00:00 Last Updated: 2024-08-07T03:43:14.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in the PAM responder in SSSD 1.5.0, 1.4.x, and 1.3 allows local users to cause a denial of service (infinite loop, crash, and login prevention) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://www.securityfocus.com/bid/45961 - http://secunia.com/advisories/43055 - http://www.vupen.com/english/advisories/2011/0212 - https://bugzilla.redhat.com/show_bug.cgi?id=661163 - http://list
5 - http://www.vupen.com/english/advisories/2011/0212 - https://bugzilla.redhat.com/show_bug.cgi?id=661163 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053337.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/64881 - http://www.redhat.com/support/errata/RHSA-2011-0560.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053319.html - http://www.vupen.com/english/advisories/2011/0197 - http://www.redhat.com/support/errata/RHSA-2011-0975.html - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://secunia.com/advisories/43053
CVE ID: CVE-2010-4342 State: PUBLISHED Published: 2010-12-30T18:00:00 Last Updated: 2024-08-07T03:43:14.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: The aun_incoming function in net/econet/af_econet.c in the Linux kernel before 2.6.37-rc6, when Econet is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) by sending an Acorn Universal Networking (AUN) packet over UDP. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2010/12/09/2 - http://www.securityfocus.com/bid/45321 - http://marc.info/?l=linux-netdev&m=129185496013580&w=2 - http://openwall.com/lists/oss-security/2010/12/
com/bid/45321 - http://marc.info/?l=linux-netdev&m=129185496013580&w=2 - http://openwall.com/lists/oss-security/2010/12/09/1 - http://www.vupen.com/english/advisories/2011/0375 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.37-rc6 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4e085e76cbe558b79b54cbab772f61185879bc64 - http://secunia.com/advisories/43291 - http://marc.info/?l=linux-netdev&m=129186011218615&w=2
CVE ID: CVE-2010-4343 State: PUBLISHED Published: 2010-12-29T17:27:00 Last Updated: 2024-08-07T03:43:14.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/scsi/bfa/bfa_core.c in the Linux kernel before 2.6.35 does not initialize a certain port data structure, which allows local users to cause a denial of service (system crash) via read operations on an fc_host statistics file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45262 - http://www.openwall.com/lists/oss-security/2010/12/09/15 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2011-0017.html - http://secun
urityfocus.com/archive/1/520102/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2011-0017.html - http://secunia.com/advisories/46397 - http://www.spinics.net/lists/linux-scsi/msg43772.html - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://secunia.com/advisories/42884 - http://www.openwall.com/lists/oss-security/2010/12/08/3 - https://bugzilla.redhat.com/show_bug.cgi?id=661182 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7873ca4e4401f0ecd8868bf1543113467e6bae61