Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-1734 State: PUBLISHED Published: 2011-05-07T19:00:00 Last Updated: 2024-08-06T22:37:25.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed omniiaputil message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/517770/100/0/threaded - http://zerodayinitiative.com/advisories/ZDI-11-150/ - http://www.securityfocus.com/bid/47638 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240 - http://
securityfocus.com/bid/47638 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240 - http://secunia.com/advisories/44402 - http://www.securitytracker.com/id?1025454 - http://osvdb.org/72193
CVE ID: CVE-2011-1735 State: PUBLISHED Published: 2011-05-07T19:00:00 Last Updated: 2024-08-06T22:37:25.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed bm message. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-11-151/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/67208 - http://www.securityfocus.com/archive/1/517771/100/0/threaded - http://www.securityfocus.com/bid/47638 - http://osvdb.org/72194 - http://h20000
us.com/archive/1/517771/100/0/threaded - http://www.securityfocus.com/bid/47638 - http://osvdb.org/72194 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240 - http://secunia.com/advisories/44402 - http://www.securitytracker.com/id?1025454
CVE ID: CVE-2011-1736 State: PUBLISHED Published: 2011-05-07T19:00:00 Last Updated: 2024-08-06T22:37:25.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to read arbitrary files via directory traversal sequences in a filename in a GET_FILE message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/517772/100/0/threaded - http://osvdb.org/72195 - http://www.securityfocus.com/bid/47638 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240
tp://www.securityfocus.com/bid/47638 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67209 - http://secunia.com/advisories/44402 - http://www.securitytracker.com/id?1025454 - http://zerodayinitiative.com/advisories/ZDI-11-152/
CVE ID: CVE-2011-1737 State: PUBLISHED Published: 2011-05-13T17:00:00 Last Updated: 2024-08-06T22:37:25.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Email application in HP Palm webOS 1.4.5 and 1.4.5.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1025514 - https://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02822174 - https://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02822174 - http://www.securityfocus.com/bid/47787
CVE ID: CVE-2011-1738 State: PUBLISHED Published: 2011-05-13T17:00:00 Last Updated: 2024-08-06T22:37:25.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP Palm webOS 1.4.5 and 1.4.5.1 does not properly restrict Plug-in Development Kit (PDK) applications, which allows local users to gain privileges by leveraging unintended filesystem write access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/47788 - http://www.securitytracker.com/id?1025514 - https://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02822174 - https://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02822174
CVE ID: CVE-2011-1739 State: PUBLISHED Published: 2011-05-03T20:00:00 Last Updated: 2024-08-06T22:37:25.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: The makemask function in mountd.c in mountd in FreeBSD 7.4 through 8.2 does not properly handle a -network field specifying a CIDR block with a prefix length that is not an integer multiple of 8, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances via an NFS mount request. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/1076 - http://security.FreeBSD.org/advisories/FreeBSD-SA-11:01.mountd.asc - http://www.securityfocus
ish/advisories/2011/1076 - http://security.FreeBSD.org/advisories/FreeBSD-SA-11:01.mountd.asc - http://www.securityfocus.com/bid/47517 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66981 - http://securitytracker.com/id?1025425 - http://secunia.com/advisories/44307
CVE ID: CVE-2011-1740 State: PUBLISHED Published: 2011-09-17T10:00:00 Last Updated: 2024-08-06T22:37:25.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Avamar 4.x, 5.0.x, and 6.0.x before 6.0.0-592 allows remote authenticated users to modify client data or obtain sensitive information about product activities by leveraging privileged access to a different domain. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2011-09/0076.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/69760 - http://secunia.com/advisories/46002 - http://securitytracker.com/id?1026035 - http://secunia.com/advisories/45988
CVE ID: CVE-2011-1741 State: PUBLISHED Published: 2011-07-19T20:00:00 Last Updated: 2024-08-06T22:37:25.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in ftserver.exe in the OpenText Hummingbird Client Connector, as used in the Indexing Server in EMC Documentum eRoom 7.x before 7.4.3.f and other products, allows remote attackers to execute arbitrary code by sending a crafted message over TCP. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/48712 - http://www.zerodayinitiative.com/advisories/ZDI-11-236 - http://securityreason.com/securityalert/8311 - http://www.securityfocus.com/archive/1/518897/100
advisories/ZDI-11-236 - http://securityreason.com/securityalert/8311 - http://www.securityfocus.com/archive/1/518897/100/0/threaded - http://www.securityfocus.com/archive/1/518913/100/0/threaded - http://securitytracker.com/id?1025790
CVE ID: CVE-2011-1742 State: PUBLISHED Published: 2011-08-01T19:00:00 Last Updated: 2024-08-06T22:37:25.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Data Protection Advisor before 5.8.1 places cleartext account credentials in the DPA configuration file in unspecified circumstances, which might allow local users to obtain sensitive information by reading this file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/519012/100/0/threaded - http://securityreason.com/securityalert/8318
CVE ID: CVE-2011-1743 State: PUBLISHED Published: 2011-08-01T19:00:00 Last Updated: 2024-08-06T22:37:25.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in EMC Captiva eInput 2.1.1 before 2.1.1.37 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/519010/100/0/threaded - http://securityreason.com/securityalert/8319
CVE ID: CVE-2011-1744 State: PUBLISHED Published: 2011-08-01T19:00:00 Last Updated: 2024-08-06T22:37:25.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Captiva eInput 2.1.1 before 2.1.1.37 does not restrict the origin of calls to ActiveX functions, which allows remote attackers to read arbitrary files or cause a denial of service via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/519010/100/0/threaded - http://securityreason.com/securityalert/8319
CVE ID: CVE-2011-1745 State: PUBLISHED Published: 2011-05-09T19:00:00 Last Updated: 2024-08-06T22:37:25.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the agp_generic_insert_memory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 allows local users to gain privileges or cause a denial of service (system crash) via a crafted AGPIOC_BIND agp_ioctl ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2011-0927.html - http://openwall.com/lists/oss-security/2011/04/21/4 - https://bugzilla.redhat.com/show_bug.cgi?id=698996 - http://git.kernel.org/?p=linux/kernel/git/torvalds/lin
11/04/21/4 - https://bugzilla.redhat.com/show_bug.cgi?id=698996 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=194b3da873fd334ef183806db751473512af29ce - https://lkml.org/lkml/2011/4/14/293 - http://openwall.com/lists/oss-security/2011/04/22/7 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38.5 - http://www.securityfocus.com/bid/47534
CVE ID: CVE-2011-1746 State: PUBLISHED Published: 2011-05-09T19:00:00 Last Updated: 2024-08-06T22:37:25.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the (1) agp_allocate_memory and (2) agp_create_user_memory functions in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 allow local users to trigger buffer overflows, and consequently cause a denial of service (system crash) or possibly have unspecified other impact, via vectors related to calls that specify a large number of memory pages. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=
- CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b522f02184b413955f3bc952e3776ce41edc6355 - http://rhn.redhat.com/errata/RHSA-2011-0927.html - http://openwall.com/lists/oss-security/2011/04/21/4 - http://www.securityfocus.com/bid/47535 - https://bugzilla.redhat.com/show_bug.cgi?id=698998 - http://openwall.com/lists/oss-security/2011/04/22/7 - https://lkml.org/lkml/2011/4/19/400 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38.5 - https://lkml.org/lkml/2011/4/14/294
CVE ID: CVE-2011-1747 State: PUBLISHED Published: 2011-05-09T19:00:00 Last Updated: 2024-08-06T22:37:25.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: The agp subsystem in the Linux kernel 2.6.38.5 and earlier does not properly restrict memory allocation by the (1) AGPIOC_RESERVE and (2) AGPIOC_ALLOCATE ioctls, which allows local users to cause a denial of service (memory consumption) by making many calls to these ioctls. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/04/22/8 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b522f02184b413955f3bc952e3776ce41edc6355 - http://security
org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b522f02184b413955f3bc952e3776ce41edc6355 - http://securitytracker.com/id?1025441 - http://openwall.com/lists/oss-security/2011/04/22/11 - http://openwall.com/lists/oss-security/2011/04/21/4 - http://www.securityfocus.com/bid/47832 - http://openwall.com/lists/oss-security/2011/04/22/7 - https://bugzilla.redhat.com/show_bug.cgi?id=698999 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38.5 - http://openwall.com/lists/oss-security/2011/04/22/9 - https://lkml.org/lkml/2011/4/14/294 - http://openwall.com/lists/oss-security/2011/04/22/10
CVE ID: CVE-2011-1748 State: PUBLISHED Published: 2011-05-09T22:00:00 Last Updated: 2024-08-06T22:37:25.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: The raw_release function in net/can/raw.c in the Linux kernel before 2.6.39-rc6 does not properly validate a socket data structure, which allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a crafted release operation. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/04/21/1 - http://openwall.com/lists/oss-security/2011/04/20/7 - http://www.securityfocus.com/bid/47835 - http://openwall.com/lists/oss-
//openwall.com/lists/oss-security/2011/04/20/7 - http://www.securityfocus.com/bid/47835 - http://openwall.com/lists/oss-security/2011/04/25/4 - http://openwall.com/lists/oss-security/2011/04/21/7 - http://permalink.gmane.org/gmane.linux.network/192974 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.39-rc6 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=10022a6c66e199d8f61d9044543f38785713cbbd - http://openwall.com/lists/oss-security/2011/04/22/2 - http://openwall.com/lists/oss-security/2011/04/21/2 - https://bugzilla.redhat.com/show_bug.cgi?id=698057
CVE ID: CVE-2011-1749 State: PUBLISHED Published: 2014-02-26T15:00:00 Last Updated: 2024-08-06T22:37:25.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nfs_addmntent function in support/nfs/nfs_mntent.c in the mount.nsf tool in nfs-utils before 1.2.4 attempts to append to the /etc/mtab file without first checking whether resource limits would interfere, which allows local users to corrupt this file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=697975 - http://rhn.redhat.com/errata/RHSA-2012-0310.html - http://sourceforge.net/proje
illa.redhat.com/show_bug.cgi?id=697975 - http://rhn.redhat.com/errata/RHSA-2012-0310.html - http://sourceforge.net/projects/nfs/files/nfs-utils/1.2.4/Changelog-nfs-utils-1.2.4/download - http://www.openwall.com/lists/oss-security/2011/04/25/5 - http://rhn.redhat.com/errata/RHSA-2011-1534.html
CVE ID: CVE-2011-1750 State: PUBLISHED Published: 2012-06-21T15:00:00 Last Updated: 2024-08-06T22:37:25.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in the virtio-blk driver (hw/virtio-blk.c) in qemu-kvm 0.14.0 allow local guest users to cause a denial of service (guest crash) and possibly gain privileges via a (1) write request to the virtio_blk_handle_write function or (2) read request to the virtio_blk_handle_read function that is not properly aligned. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2011/dsa-2230 - http://git.kernel.org/?p=virt/kvm/qemu-kvm.git%3Ba=commitdiff%3Bh=52c05
https://www.debian.org/security/2011/dsa-2230 - http://git.kernel.org/?p=virt/kvm/qemu-kvm.git%3Ba=commitdiff%3Bh=52c050236eaa4f0b5e1d160cd66dc18106445c4d - http://rhn.redhat.com/errata/RHSA-2011-0534.html - http://lists.gnu.org/archive/html/qemu-devel/2011-03/msg03015.html - http://secunia.com/advisories/44393 - http://secunia.com/advisories/44658 - https://hermes.opensuse.org/messages/8572547 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67062 - http://secunia.com/advisories/44660 - http://lists.gnu.org/archive/html/qemu-devel/2011-03/msg03019.html - http://www.osvdb.org/73756 - https://www.ubuntu.com/usn/USN-1145-1/ - http://secunia.com/advisories/44900 - http://lists.opensuse.o
osvdb.org/73756 - https://www.ubuntu.com/usn/USN-1145-1/ - http://secunia.com/advisories/44900 - http://lists.opensuse.org/opensuse-updates/2011-05/msg00043.html - http://secunia.com/advisories/44132 - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081972.html
CVE ID: CVE-2011-1751 State: PUBLISHED Published: 2012-06-21T15:00:00 Last Updated: 2024-08-06T22:37:25.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pciej_write function in hw/acpi_piix4.c in the PIIX4 Power Management emulation in qemu-kvm does not check if a device is hotpluggable before unplugging the PCI-ISA bridge, which allows privileged guest users to cause a denial of service (guest crash) and possibly execute arbitrary code by sending a crafted value to the 0xae08 (PCI_EJ_BASE) I/O port, which leads to a use-after-free related to "active qemu timers." Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/20
timers." Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/05/19/2 - http://rhn.redhat.com/errata/RHSA-2011-0534.html - http://git.kernel.org/?p=virt/kvm/qemu-kvm.git%3Ba=commit%3Bh=505597e4476a6bc219d0ec1362b760d71cb4fdca - http://secunia.com/advisories/44648 - http://www.osvdb.org/73395 - http://secunia.com/advisories/44393 - http://secunia.com/advisories/44658 - https://hermes.opensuse.org/messages/8572547 - http://lists.nongnu.org/archive/html/qemu-devel/2011-05/msg01810.html - http://www.securityfocus.com/bid/47927 - https://github.com/nelhage/virtunoid - https://bugzilla.redhat.com/show_bug.cgi?id=699773 - http://secunia.c
bid/47927 - https://github.com/nelhage/virtunoid - https://bugzilla.redhat.com/show_bug.cgi?id=699773 - http://secunia.com/advisories/44458 - http://secunia.com/advisories/44660 - http://blog.nelhage.com/2011/08/breaking-out-of-kvm/ - https://www.ubuntu.com/usn/USN-1145-1/ - http://secunia.com/advisories/44900 - http://lists.opensuse.org/opensuse-updates/2011-05/msg00043.html
CVE ID: CVE-2011-1752 State: PUBLISHED Published: 2011-06-06T19:00:00 Last Updated: 2024-08-06T22:37:25.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.17, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request for a baselined WebDAV resource, as exploited in the wild in May 2011. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2011/dsa-2251 - http://www.ubuntu.com/usn/USN-1144-1 - http://support.apple.com/kb/HT5130 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:
u.com/usn/USN-1144-1 - http://support.apple.com/kb/HT5130 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:106 - http://secunia.com/advisories/44849 - http://www.redhat.com/support/errata/RHSA-2011-0862.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062211.html - http://secunia.com/advisories/44888 - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html - http://secunia.com/advisories/45162 - http://secunia.com/advisories/44681 - http://subversion.apache.org/security/CVE-2011-1752-advisory.txt - http://secunia.com/advisories/44879 - http://www.securityfocus.com/bid/48091 - http://lists.fedoraproject.org/pipermail/package-announce/20
advisories/44879 - http://www.securityfocus.com/bid/48091 - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061913.html - https://bugzilla.redhat.com/show_bug.cgi?id=709111 - http://secunia.com/advisories/44633 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18922 - http://www.securitytracker.com/id?1025617 - http://svn.apache.org/repos/asf/subversion/tags/1.6.17/CHANGES - http://www.redhat.com/support/errata/RHSA-2011-0861.html
CVE ID: CVE-2011-1753 State: PUBLISHED Published: 2011-06-21T01:00:00 Last Updated: 2024-08-06T22:37:25.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: expat_erl.c in ejabberd before 2.1.7 and 3.x before 3.0.0-alpha-3, and exmpp before 0.9.7, does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/67769 - http://www.debian.org/security/2011/dsa-2248 - http
nces: - https://exchange.xforce.ibmcloud.com/vulnerabilities/67769 - http://www.debian.org/security/2011/dsa-2248 - http://www.process-one.net/en/ejabberd/release_notes/release_note_ejabberd_2.1.7/ - http://secunia.com/advisories/44765 - https://git.process-one.net/ejabberd/mainline/commit/bd1df027c622e1f96f9eeaac612a6a956c1ff0b6 - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/062099.html - http://www.ejabberd.im/ejabberd-2.1.7 - https://bugzilla.redhat.com/show_bug.cgi?id=700454 - http://secunia.com/advisories/44807 - http://www.securityfocus.com/bid/48072 - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/062145.html - http://secunia.com/advisories/
48072 - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/062145.html - http://secunia.com/advisories/45120
CVE ID: CVE-2011-1754 State: PUBLISHED Published: 2011-06-21T01:00:00 Last Updated: 2024-08-06T22:37:25.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: jabberd14 1.6.1.1 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2011/dsa-2249 - http://packages.debian.org/changelogs/pool/main/j/jabberd14/jabberd14_1.6.1.1-5+squeeze1/changelog - http://secunia.com/adviso
/packages.debian.org/changelogs/pool/main/j/jabberd14/jabberd14_1.6.1.1-5+squeeze1/changelog - http://secunia.com/advisories/44795 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67771 - http://www.securityfocus.com/bid/48070
CVE ID: CVE-2011-1755 State: PUBLISHED Published: 2011-06-21T01:00:00 Last Updated: 2024-08-06T22:37:25.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: jabberd2 before 2.2.14 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/67770 - http://codex.xiaoka.com/svn/jabberd2/tags/jabberd-2.2.14/ChangeLog - http://secunia.com/advisories/44957 - http://secun
http://codex.xiaoka.com/svn/jabberd2/tags/jabberd-2.2.14/ChangeLog - http://secunia.com/advisories/44957 - http://secunia.com/advisories/44787 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061341.html - http://www.redhat.com/support/errata/RHSA-2011-0881.html - https://hermes.opensuse.org/messages/9197650 - https://bugzilla.redhat.com/show_bug.cgi?id=700390 - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061458.html - http://www.redhat.com/support/errata/RHSA-2011-0882.html - http://www.securityfocus.com/bid/48250 - http://lists.fedoraproject.org/pipermail/package-announ
a/RHSA-2011-0882.html - http://www.securityfocus.com/bid/48250 - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061482.html - http://support.apple.com/kb/HT5002 - http://secunia.com/advisories/45112 - http://www.mail-archive.com/jabberd2%40lists.xiaoka.com/msg01655.html