Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
- https://rhn.redhat.com/errata/RHSA-2010-0622.html - https://bugzilla.redhat.com/show_bug.cgi?id=568699 - https://rhn.redhat.com/errata/RHSA-2010-0633.html
CVE ID: CVE-2010-0429 State: PUBLISHED Published: 2010-08-24T17:00:00Z Last Updated: 2024-08-07T00:45:12.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and qspice 0.3.0, does not properly restrict the addresses upon which memory-management actions are performed, which allows guest OS users to cause a denial of service (guest OS crash) or possibly gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=568701 - https://rhn.redhat.com/errata/RHSA-2010-0622.html - https
rences: - https://bugzilla.redhat.com/show_bug.cgi?id=568701 - https://rhn.redhat.com/errata/RHSA-2010-0622.html - https://rhn.redhat.com/errata/RHSA-2010-0633.html
CVE ID: CVE-2010-0430 State: PUBLISHED Published: 2013-12-27T01:00:00 Last Updated: 2024-08-07T00:45:12.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: libspice, as used in QEMU-KVM in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H or rhev-hypervisor) before 5.5-2.2 and possibly other products, allows guest OS users to read from or write to arbitrary QEMU memory by modifying the address that is used by Cairo for memory mappings. Additional Analyst Notes: - CVE Program Container: References: - https://rhn.redhat.com/errata/RHSA-2010-0476.html - https://bugzilla.redhat.com/show_bug.cgi?id=568702 - http://rhn.redhat.com/errata/RHSA-2010-0271.html
CVE ID: CVE-2010-0431 State: PUBLISHED Published: 2010-08-24T17:00:00Z Last Updated: 2024-08-07T00:45:12.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: QEMU-KVM, as used in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and KVM 83, does not properly validate guest QXL driver pointers, which allows guest OS users to cause a denial of service (invalid pointer dereference and guest OS crash) or possibly gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://rhn.redhat.com/errata/RHSA-2010-0627.html - https://bugzilla.redhat.com/show_bug.cgi?id=568809 - https://rhn.redhat.com/errata/
hat.com/errata/RHSA-2010-0627.html - https://bugzilla.redhat.com/show_bug.cgi?id=568809 - https://rhn.redhat.com/errata/RHSA-2010-0622.html
CVE ID: CVE-2010-0432 State: PUBLISHED Published: 2010-04-15T17:00:00Z Last Updated: 2024-09-16T20:32:45.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Apache Open For Business Project (aka OFBiz) 09.04 and earlier, as used in Opentaps, Neogia, and Entente Oya, allow remote attackers to inject arbitrary web script or HTML via (1) the productStoreId parameter to control/exportProductListing, (2) the partyId parameter to partymgr/control/viewprofile (aka partymgr/control/login), (3) the start parameter to myportal/control/showPortalPage, (4) an invalid URI beginning with /facility/control/ReceiveReturn (aka /crmsfa/con
r to myportal/control/showPortalPage, (4) an invalid URI beginning with /facility/control/ReceiveReturn (aka /crmsfa/control/ReceiveReturn or /cms/control/ReceiveReturn), (5) the contentId parameter (aka the entityName variable) to ecommerce/control/ViewBlogArticle, (6) the entityName parameter to webtools/control/FindGeneric, or the (7) subject or (8) content parameter to an unspecified component under ecommerce/control/contactus. Additional Analyst Notes: - CVE Program Container: References: - http://svn.apache.org/viewvc?view=revision&revision=920379 - http://svn.apache.org/viewvc?view=revision&revision=920380 - http://svn.apache.org/viewvc?view=revision&revision=920369 - http://svn.apach
org/viewvc?view=revision&revision=920380 - http://svn.apache.org/viewvc?view=revision&revision=920369 - http://svn.apache.org/viewvc?view=revision&revision=920372 - http://svn.apache.org/viewvc?view=revision&revision=920370 - http://svn.apache.org/viewvc?view=revision&revision=920371 - http://svn.apache.org/viewvc?view=revision&revision=920382 - http://www.bonsai-sec.com/en/research/vulnerabilities/apacheofbiz-multiple-xss-0103.php - http://www.securityfocus.com/bid/39489 - http://svn.apache.org/viewvc?view=revision&revision=920381
CVE ID: CVE-2010-0433 State: PUBLISHED Published: 2010-03-05T19:00:00 Last Updated: 2024-08-07T00:52:17.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kssl_keytab_is_available function in ssl/kssl.c in OpenSSL before 0.9.8n, when Kerberos is enabled but Kerberos configuration files cannot be opened, does not check a certain return value, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via SSL cipher negotiation, as demonstrated by a chroot installation of Dovecot or stunnel without Kerberos configuration files inside the chroot. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/eng
ation files inside the chroot. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/0916 - http://secunia.com/advisories/42724 - http://secunia.com/advisories/39461 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9856 - https://bugzilla.redhat.com/show_bug.cgi?id=569774 - http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039561.html - http://marc.info/?l=bugtraq&m=127557640302499&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12260 - http://www.openwall.com/lists/oss-security/2010/03/03/5 - http://www.mail-archive.com/dovecot%40dov
oval%3Adef%3A12260 - http://www.openwall.com/lists/oss-security/2010/03/03/5 - http://www.mail-archive.com/dovecot%40dovecot.org/msg26224.html - https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html - https://bugzilla.redhat.com/show_bug.cgi?id=567711 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html - http://www.vupen.com/english/advisories/2010/0839 - http://cvs.openssl.org/chngview?cn=19374 - http://marc.info/?l=bugtraq&m=127557640302499&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:076 - http://marc.info/?l=bugtraq&m=127128920008563&w=2 - https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html - h
o/?l=bugtraq&m=127128920008563&w=2 - https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html - http://secunia.com/advisories/39932 - http://www.openssl.org/news/changelog.html - http://www.vupen.com/english/advisories/2010/0933 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - http://marc.info/?l=bugtraq&m=127128920008563&w=2 - https://kb.bluecoat.com/index?page=content&id=SA50 - http://www.securityfocus.com/archive/1/516397/100/0/threaded - http://secunia.com/advisories/43311 - http://www.vupen.com/english/advisories/2010/1216 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6718 - http://secunia.com/advisories/
s://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6718 - http://secunia.com/advisories/42733 - http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038587.html - http://aix.software.ibm.com/aix/efixes/security/openssl_advisory.asc - http://groups.google.com/group/mailing.openssl.users/browse_thread/thread/c3e1ab0034ca4b4c/66aa896c3a78b2f7
CVE ID: CVE-2010-0434 State: PUBLISHED Published: 2010-03-05T19:00:00 Last Updated: 2024-08-07T00:52:18.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not properly handle headers in subrequests in certain circumstances involving a parent request that has a body, which might allow remote attackers to obtain sensitive information via a crafted request that triggers access to memory locations associated with an earlier request. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0175.h
. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0175.html - http://secunia.com/advisories/39115 - http://www.vupen.com/english/advisories/2010/1411 - http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/server/protocol.c?r1=917617&r2=917867&pathrev=917867&diff_format=h - http://www.vmware.com/security/advisories/VMSA-2010-0014.html - http://www.vupen.com/english/advisories/2010/0911 - http://secunia.com/advisories/39628 - http://support.apple.com/kb/HT4435 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM12247 - http://lists.fedoraproject.org/pipermail/package-announce/2010-May/040652.html - https://oval.cisecurity.org
g1PM12247 - http://lists.fedoraproject.org/pipermail/package-announce/2010-May/040652.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10358 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8695 - http://marc.info/?l=bugtraq&m=127557640302499&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM15829 - http://secunia.com/advisories/39656 - https://issues.apache.org/bugzilla/show_bug.cgi?id=48359 - http://www.securityfocus.com/bid/38494 - http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html - http://www.redhat.com/support/errata/RHSA-2010-0168.html - https://exchange.xforce.ibmcloud
y/cpujuly2013-1899826.html - http://www.redhat.com/support/errata/RHSA-2010-0168.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/56625 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - http://secunia.com/advisories/39100 - http://secunia.com/advisories/39501 - http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html - http://lists.vmware.com/pipermail/security-announce/2010/000105.html - http://httpd.apache.org/security/vulnerabilities_22.html - http://svn.apache.org/viewvc?view=revision&revision=917867 - http://secunia.com/advisories/40096 - http://marc.info/?l=bugtraq&m=127557640302499&w=2 - https://bugzilla.redhat.com/show_bug.cgi?
nia.com/advisories/40096 - http://marc.info/?l=bugtraq&m=127557640302499&w=2 - https://bugzilla.redhat.com/show_bug.cgi?id=570171 - http://secunia.com/advisories/39632 - http://www.debian.org/security/2010/dsa-2035 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM08939 - http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039957.html - http://svn.apache.org/viewvc?view=revision&revision=918427 - http://www.vupen.com/english/advisories/2010/1001 - http://www.vupen.com/english/advisories/2010/0994 - http://www.vupen.com/english/advisories/2010/1057 - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E
ps://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9
cd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/th
tml/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r688df6f16f141e966a0a47f817e559312b3da27886f59116a94b273d%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re2e23465bbdb17ffe109d21b4f192e6b58221cd7aa8797d530b4cd75%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs
.apache.org%3E - https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r476d175be0aaf4a
6059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2010-0435 State: PUBLISHED Published: 2010-08-24T17:00:00 Last Updated: 2024-08-07T00:52:17.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2, and KVM 83, when the Intel VT-x extension is enabled, allows guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) via vectors related to instruction emulation. Additional Analyst Notes: - CVE Program Container: References: - https://rhn.redhat.com/errata/RHSA-2010-0627.html - http://secunia.com/advisories/42778 - https://rhn.redhat.com/errata/RHSA-2010-0622.html - http://lists.opensuse.org/opensuse-security
a.com/advisories/42778 - https://rhn.redhat.com/errata/RHSA-2010-0622.html - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html - https://bugzilla.redhat.com/show_bug.cgi?id=570528 - http://www.vupen.com/english/advisories/2011/0012
CVE ID: CVE-2010-0436 State: PUBLISHED Published: 2010-04-15T17:00:00 Last Updated: 2024-08-07T00:52:17.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 through 4.4.2 allows local users to change the permissions of arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socket, related to improper interaction with ksm. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2010/dsa-2037 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57823 - http://secunia.com/advisories/39481 - http://r
0/dsa-2037 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57823 - http://secunia.com/advisories/39481 - http://rhn.redhat.com/errata/RHSA-2010-0348.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039533.html - https://bugzilla.redhat.com/show_bug.cgi?id=570613 - http://secunia.com/advisories/39419 - ftp://ftp.kde.org/pub/kde/security_patches/kdebase-workspace-4.3.5-CVE-2010-0436.diff - http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.html - http://www.kde.org/info/security/advisory-20100413-1.txt - http://secunia.com/advisories/39506 - http://www.vupen.com/english/advisories/2010/0879 - http://www.securityfocus.com/bid/39467 - https://
advisories/39506 - http://www.vupen.com/english/advisories/2010/0879 - http://www.securityfocus.com/bid/39467 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9999
CVE ID: CVE-2010-0437 State: PUBLISHED Published: 2010-03-24T10:00:00 Last Updated: 2024-08-07T00:52:17.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ip6_dst_lookup_tail function in net/ipv6/ip6_output.c in the Linux kernel before 2.6.27 does not properly handle certain circumstances involving an IPv6 TUN network interface and a large number of neighbors, which allows attackers to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0147.html - http://bugzilla.kernel.org/show_bug.cgi?id=11
: References: - http://www.redhat.com/support/errata/RHSA-2010-0147.html - http://bugzilla.kernel.org/show_bug.cgi?id=11469 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10061 - http://www.openwall.com/lists/oss-security/2010/02/11/1 - http://secunia.com/advisories/43315 - https://bugzilla.redhat.com/show_bug.cgi?id=563781 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27 - http://secunia.com/advisories/39033 - http://www.openwall.com/lists/oss-security/2010/03/04/4 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e550dfb0c2c31b6363aa463a035
-0003.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e550dfb0c2c31b6363aa463a035fc9f8dcaa3c9b - http://www.securityfocus.com/archive/1/516397/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2010-0161.html
CVE ID: CVE-2010-0438 State: PUBLISHED Published: 2010-02-09T19:00:00 Last Updated: 2024-08-07T00:52:17.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Kernel/System/Ticket.pm in OTRS-Core in Open Ticket Request System (OTRS) 2.1.x before 2.1.9, 2.2.x before 2.2.9, 2.3.x before 2.3.5, and 2.4.x before 2.4.7 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.otrs.org/news/2010/otrs_2-4-7/ - http://secunia.com/advisories/38507 - http://otrs.org/releases/2.4.7/ - http://www.securityfocus.com/bid/38146 - http://source.otrs.
ia.com/advisories/38507 - http://otrs.org/releases/2.4.7/ - http://www.securityfocus.com/bid/38146 - http://source.otrs.org/viewvc.cgi/otrs/Kernel/System/Ticket.pm?view=log - http://otrs.org/advisory/OSA-2010-01-en/ - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - http://www.osvdb.org/62181 - http://secunia.com/advisories/38544
CVE ID: CVE-2010-0439 State: PUBLISHED Published: 2010-03-26T18:00:00 Last Updated: 2024-08-07T00:52:17.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Chip Salzenberg Deliver allows local users to cause a denial of service, obtain sensitive information, and possibly change the ownership of arbitrary files via a symlink attack on an unspecified file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/510306/100/0/threaded - http://www.securityfocus.com/bid/38924
CVE ID: CVE-2010-0440 State: PUBLISHED Published: 2010-02-03T18:00:00 Last Updated: 2024-08-07T00:52:17.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in +CSCOT+/translation in Cisco Secure Desktop 3.4.2048, and other versions before 3.5; as used in Cisco ASA appliance before 8.2(1), 8.1(2.7), and 8.0(5); allows remote attackers to inject arbitrary web script or HTML via a crafted POST parameter, which is not properly handled by an eval statement in binary/mainv.js that writes to start.html. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37960 - http://secunia.com/advisories/38397 - h
- CVE Program Container: References: - http://www.securityfocus.com/bid/37960 - http://secunia.com/advisories/38397 - http://www.coresecurity.com/content/cisco-secure-desktop-xss - http://tools.cisco.com/security/center/viewAlert.x?alertId=19843 - http://www.securityfocus.com/archive/1/509290/100/0/threaded - http://www.vupen.com/english/advisories/2010/0273
CVE ID: CVE-2010-0441 State: PUBLISHED Published: 2010-02-04T18:00:00 Last Updated: 2024-08-07T00:52:18.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: Asterisk Open Source 1.6.0.x before 1.6.0.22, 1.6.1.x before 1.6.1.14, and 1.6.2.x before 1.6.2.2, and Business Edition C.3 before C.3.3.2, allows remote attackers to cause a denial of service (daemon crash) via an SIP T.38 negotiation with an SDP FaxMaxDatagram field that is (1) missing, (2) modified to contain a negative number, or (3) modified to contain a large number. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.asterisk.org/pub/security/AST-2010-001-1.6.1.diff - https://issues.asteris
ram Container: References: - http://downloads.asterisk.org/pub/security/AST-2010-001-1.6.1.diff - https://issues.asterisk.org/view.php?id=16517 - https://issues.asterisk.org/view.php?id=16634 - http://www.vupen.com/english/advisories/2010/0289 - http://www.securityfocus.com/bid/38047 - http://secunia.com/advisories/39096 - http://lists.fedoraproject.org/pipermail/package-announce/2010-March/037679.html - https://issues.asterisk.org/view.php?id=16724 - http://downloads.asterisk.org/pub/security/AST-2010-001-1.6.2.diff - http://www.securityfocus.com/archive/1/509327/100/0/threaded - http://downloads.asterisk.org/pub/security/AST-2010-001-1.6.0.diff - http://secunia.com/advisories/38395 - http:
eaded - http://downloads.asterisk.org/pub/security/AST-2010-001-1.6.0.diff - http://secunia.com/advisories/38395 - http://securitytracker.com/id?1023532 - http://downloads.asterisk.org/pub/security/AST-2010-001.html
CVE ID: CVE-2010-0442 State: PUBLISHED Published: 2010-02-02T18:00:00 Last Updated: 2024-08-07T00:52:17.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bitsubstr function in backend/utils/adt/varbit.c in PostgreSQL 8.0.23, 8.1.11, and 8.3.8 allows remote authenticated users to cause a denial of service (daemon crash) or have unspecified other impact via vectors involving a negative integer in the third argument, as demonstrated by a SELECT statement that contains a call to the substring function for a bit string, related to an "overflow." Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0427.html - http://secu
yst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0427.html - http://securitytracker.com/id?1023510 - http://www.redhat.com/support/errata/RHSA-2010-0428.html - http://www.debian.org/security/2010/dsa-2051 - http://ubuntu.com/usn/usn-933-1 - http://secunia.com/advisories/39820 - http://www.openwall.com/lists/oss-security/2010/01/27/5 - http://www.vupen.com/english/advisories/2010/1221 - http://www.securityfocus.com/bid/37973 - http://git.postgresql.org/gitweb?p=postgresql.git%3Ba=commit%3Bh=75dea10196c31d98d98c0bafeeb576ae99c09b12 - http://intevydis.blogspot.com/2010/01/postgresql-8023-bitsubstr-overflow.html - http://git.postgresql.org/gitweb?p