Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
.com/advisories/46793 - http://secunia.com/advisories/48439 - http://secunia.com/advisories/45742 - http://ubuntu.com/usn/usn-1255-1 - http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00019.html - http://secunia.com/advisories/48434 - http://www.securityfocus.com/bid/48979 - http://www.gentoo.org/security/en/glsa/glsa-201203-14.xml - http://secunia.com/advisories/45901 - http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms/modplug-xmms%3Ba=commitdiff%3Bh=16d7a78efe14d345a6c5b241f88422ad0ee483ea - http://rhn.redhat.com/errata/RHSA-2011-1264.html - http://secunia.com/advisories/46043 - http://jira.atheme.org/browse/AUDPLUG-394 - http://www.osvdb.org/74210 - http
ml - http://secunia.com/advisories/46043 - http://jira.atheme.org/browse/AUDPLUG-394 - http://www.osvdb.org/74210 - http://secunia.com/advisories/45658
CVE ID: CVE-2011-2916 State: PUBLISHED Published: 2019-11-15T17:19:17 Last Updated: 2024-08-06T23:15:31.907Z Vendors: qtnx Products: qtnx Problem Types: Insecure Permissions Description: qtnx 0.9 stores non-custom SSH keys in a world-readable configuration file. If a user has a world-readable or world-executable home directory, another local system user could obtain the private key used to connect to remote NX sessions. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-2916 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2916 - https://access.redhat.com/security/cve/cve-2011-2916
CVE ID: CVE-2011-2917 State: PUBLISHED Published: 2011-12-08T19:00:00Z Last Updated: 2024-09-16T21:08:50.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in administrator/index2.php in Mambo CMS 4.6.5 and earlier allows remote attackers to execute arbitrary SQL commands via the zorder parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/49130 - http://yehg.net/lab/pr0js/advisories/%5Bmambo4.6_x%5D_sql_injection - http://www.openwall.com/lists/oss-security/2011/08/12/6 - http://www.exploit-db.com/exploits/18110 - http://www.osvdb.org/74502
CVE ID: CVE-2011-2918 State: PUBLISHED Published: 2012-05-24T23:00:00Z Last Updated: 2024-08-06T23:15:31.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Performance Events subsystem in the Linux kernel before 3.1 does not properly handle event overflows associated with PERF_COUNT_SW_CPU_CLOCK events, which allows local users to cause a denial of service (system hang) via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a8b0ca17b80e92faab46ee7179ba9e99ccb61233 - https://github.com/torvalds/linux/c
git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a8b0ca17b80e92faab46ee7179ba9e99ccb61233 - https://github.com/torvalds/linux/commit/a8b0ca17b80e92faab46ee7179ba9e99ccb61233 - http://www.openwall.com/lists/oss-security/2011/08/16/1 - https://bugzilla.redhat.com/show_bug.cgi?id=730706
CVE ID: CVE-2011-2919 State: PUBLISHED Published: 2014-02-05T18:00:00 Last Updated: 2024-08-06T23:15:31.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allows remote attackers to inject arbitrary web script or HTML via the QueryString to the SystemGroupList.do page. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/spacewalk-announce-list/2011-December/msg00000.html - http://www.redhat.com/support/errata/RHSA-2011-1299.html - https://bugzilla.redhat.com/show_bug.cgi?id=713478
CVE ID: CVE-2011-2920 State: PUBLISHED Published: 2014-02-05T18:00:00 Last Updated: 2024-08-06T23:15:31.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allow remote attackers to inject arbitrary web script or HTML via the "Filter by Synopsis" field and other unspecified filter forms. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/spacewalk-announce-list/2011-December/msg00000.html - http://www.redhat.com/support/errata/RHSA-2011-1299.html - https://bugzilla.redhat.com/show_bug.cgi?id=681032
CVE ID: CVE-2011-2921 State: PUBLISHED Published: 2019-11-19T16:57:33 Last Updated: 2024-08-06T23:15:31.972Z Vendors: ktsuss Products: ktsuss Problem Types: Other Description: ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root privileges. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/154307/ktsuss-Suid-Privilege-Escalation.html - https://security-tracker.debian.org/tracker/CVE-2011-2921 - https://access.redhat.com/security/cve/cve-2011-2921
CVE ID: CVE-2011-2922 State: PUBLISHED Published: 2019-11-19T18:08:30 Last Updated: 2024-08-06T23:15:32.119Z Vendors: ktsuss Products: ktsuss Problem Types: UNKNOWN_TYPE Description: ktsuss versions 1.4 and prior spawns the GTK interface to run as root. This can allow a local attacker to escalate privileges to root and use the "GTK_MODULES" environment variable to possibly execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-2922 - https://access.redhat.com/security/cve/cve-2011-2922 - https://packetstormsecurity.com/files/cve/CVE-2011-2922 - https://www.securityfocus.com/bid/49151 - https://lwn.net/Arti
https://packetstormsecurity.com/files/cve/CVE-2011-2922 - https://www.securityfocus.com/bid/49151 - https://lwn.net/Articles/477678/ - https://snyk.io/vuln/SNYK-LINUX-KTSUSS-174466 - https://packetstormsecurity.com/files/109154/Gentoo-Linux-Security-Advisory-201201-15.html
CVE ID: CVE-2011-2923 State: PUBLISHED Published: 2019-11-19T20:38:08 Last Updated: 2024-08-06T23:15:31.690Z Vendors: foomatic-filters Products: foomatic-filters Problem Types: UNKNOWN_TYPE Description: foomatic-rip filter, all versions, used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileges of the user running the foomatic-rip universal print filter. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-2923 - https://bugzil
Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-2923 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2923 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2011-2923 - https://access.redhat.com/security/cve/cve-2011-2923
CVE ID: CVE-2011-2924 State: PUBLISHED Published: 2019-11-19T21:20:16 Last Updated: 2024-08-06T23:15:31.864Z Vendors: foomatic-filters Products: foomatic-filters Problem Types: Other Description: foomatic-rip filter v4.0.12 and prior used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileges of the user running the foomatic-rip universal print filter. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-2924 - https://bugzilla.r
s: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-2924 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2924 - https://access.redhat.com/security/cve/cve-2011-2924 - https://www.openwall.com/lists/oss-security/2014/02/08/5/1 - https://lwn.net/Articles/459979/ - https://launchpad.net/ubuntu/+source/foomatic-filters/4.0.12-1
CVE ID: CVE-2011-2925 State: PUBLISHED Published: 2011-09-19T15:00:00 Last Updated: 2024-08-06T23:15:32.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cumin in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0 records broker authentication credentials in a log file, which allows local users to bypass authentication and perform unauthorized actions on jobs and message queues via a direct connection to the broker. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1026021 - http://secunia.com/advisories/45928 - http://www.securityfocus.com/bid/49500 - http://osvdb.org/75217 - http://secunia.com/advisories/45887 - http://
/45928 - http://www.securityfocus.com/bid/49500 - http://osvdb.org/75217 - http://secunia.com/advisories/45887 - http://www.redhat.com/support/errata/RHSA-2011-1250.html - https://bugzilla.redhat.com/show_bug.cgi?id=731574 - http://www.redhat.com/support/errata/RHSA-2011-1249.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/69659
CVE ID: CVE-2011-2926 State: REJECTED Published: 2021-06-23T14:08:03 Last Updated: 2021-06-23T14:08:03 Description: No description available.
CVE ID: CVE-2011-2927 State: PUBLISHED Published: 2014-02-05T18:00:00 Last Updated: 2024-08-06T23:15:32.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allow remote attackers to inject arbitrary web script or HTML via vectors related to Search forms. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/spacewalk-announce-list/2011-December/msg00000.html - http://www.redhat.com/support/errata/RHSA-2011-1299.html - https://bugzilla.redhat.com/show_bug.cgi?id=730955
CVE ID: CVE-2011-2928 State: PUBLISHED Published: 2011-08-29T17:00:00 Last Updated: 2024-08-06T23:15:31.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: The befs_follow_link function in fs/befs/linuxvfs.c in the Linux kernel before 3.1-rc3 does not validate the length attribute of long symlinks, which allows local users to cause a denial of service (incorrect pointer dereference and OOPS) by accessing a long symlink on a malformed Be filesystem. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/08/19/5 - http://www.pre-cert.de/advisories/PRE-SA-2011-06.txt - http://www.securityfocus.com/bid/49256 - http://www.openw
/19/5 - http://www.pre-cert.de/advisories/PRE-SA-2011-06.txt - http://www.securityfocus.com/bid/49256 - http://www.openwall.com/lists/oss-security/2011/08/19/1 - http://www.securityfocus.com/archive/1/519387/100/0/threaded - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=338d0f0a6fbc82407864606f5b64b75aeb3c70f2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69343 - http://securityreason.com/securityalert/8360 - http://www.kernel.org/pub/linux/kernel/v3.0/testing/ChangeLog-3.1-rc3
CVE ID: CVE-2011-2929 State: PUBLISHED Published: 2011-08-29T18:00:00 Last Updated: 2024-08-06T23:15:32.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: The template selection functionality in actionpack/lib/action_view/template/resolver.rb in Ruby on Rails 3.0.x before 3.0.10 and 3.1.x before 3.1.0.rc6 does not properly handle glob characters, which allows remote attackers to render arbitrary views via a crafted URL, related to a "filter skipping vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/08/17/1 - http://www.openwall.com/lists/oss-security/2011/08/22/13 - http://lists.fedoraproject.org/pipe
s-security/2011/08/17/1 - http://www.openwall.com/lists/oss-security/2011/08/22/13 - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065212.html - http://www.openwall.com/lists/oss-security/2011/08/19/11 - http://www.openwall.com/lists/oss-security/2011/08/20/1 - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065109.html - https://github.com/rails/rails/commit/5f94b93279f6d0682fafb237c301302c107a9552 - http://www.openwall.com/lists/oss-security/2011/08/22/14 - http://groups.google.com/group/rubyonrails-security/msg/cbbbba6e4f7eaf61?dmode=source&output=gplain - http://www.openwall.com/lists/oss-security/2011/08/22/5 - http://weblog.rubyonrail
4f7eaf61?dmode=source&output=gplain - http://www.openwall.com/lists/oss-security/2011/08/22/5 - http://weblog.rubyonrails.org/2011/8/16/ann-rails-3-1-0-rc6 - https://bugzilla.redhat.com/show_bug.cgi?id=731432
CVE ID: CVE-2011-2930 State: PUBLISHED Published: 2011-08-29T18:00:00 Last Updated: 2024-08-06T23:15:31.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the quote_table_name method in the ActiveRecord adapters in activerecord/lib/active_record/connection_adapters/ in Ruby on Rails before 2.3.13, 3.0.x before 3.0.10, and 3.1.x before 3.1.0.rc5 allow remote attackers to execute arbitrary SQL commands via a crafted column name. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/08/17/1 - https://github.com/rails/rails/commit/8a39f411dc3c806422785b1f4d5c7c9d58e4bf85 - http://www
/oss-security/2011/08/17/1 - https://github.com/rails/rails/commit/8a39f411dc3c806422785b1f4d5c7c9d58e4bf85 - http://www.openwall.com/lists/oss-security/2011/08/22/13 - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065212.html - http://www.openwall.com/lists/oss-security/2011/08/19/11 - http://www.debian.org/security/2011/dsa-2301 - http://www.openwall.com/lists/oss-security/2011/08/20/1 - http://groups.google.com/group/rubyonrails-security/msg/b1a85d36b0f9dd30?dmode=source&output=gplain - http://www.openwall.com/lists/oss-security/2011/08/22/14 - https://bugzilla.redhat.com/show_bug.cgi?id=731438 - http://www.openwall.com/lists/oss-security/2011/08/22/5 - http://w
https://bugzilla.redhat.com/show_bug.cgi?id=731438 - http://www.openwall.com/lists/oss-security/2011/08/22/5 - http://weblog.rubyonrails.org/2011/8/16/ann-rails-3-1-0-rc6
CVE ID: CVE-2011-2931 State: PUBLISHED Published: 2011-08-29T18:00:00 Last Updated: 2024-08-06T23:15:31.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the strip_tags helper in actionpack/lib/action_controller/vendor/html-scanner/html/node.rb in Ruby on Rails before 2.3.13, 3.0.x before 3.0.10, and 3.1.x before 3.1.0.rc5 allows remote attackers to inject arbitrary web script or HTML via a tag with an invalid name. Additional Analyst Notes: - CVE Program Container: References: - http://groups.google.com/group/rubyonrails-security/msg/fd41ab62966e0fd1?dmode=source&output=gplain - http://www.openwall.com/lists/oss-security/2011/08/17/1
rails-security/msg/fd41ab62966e0fd1?dmode=source&output=gplain - http://www.openwall.com/lists/oss-security/2011/08/17/1 - http://www.openwall.com/lists/oss-security/2011/08/22/13 - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065212.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065137.html - https://bugzilla.redhat.com/show_bug.cgi?id=731436 - http://www.openwall.com/lists/oss-security/2011/08/19/11 - http://www.debian.org/security/2011/dsa-2301 - http://secunia.com/advisories/45921 - http://www.openwall.com/lists/oss-security/2011/08/20/1 - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065109.html - ht
ts/oss-security/2011/08/20/1 - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065109.html - http://www.openwall.com/lists/oss-security/2011/08/22/14 - https://github.com/rails/rails/commit/586a944ddd4d03e66dea1093306147594748037a - http://www.openwall.com/lists/oss-security/2011/08/22/5 - http://weblog.rubyonrails.org/2011/8/16/ann-rails-3-1-0-rc6
CVE ID: CVE-2011-2932 State: PUBLISHED Published: 2011-08-29T18:00:00 Last Updated: 2024-08-06T23:15:31.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in activesupport/lib/active_support/core_ext/string/output_safety.rb in Ruby on Rails 2.x before 2.3.13, 3.0.x before 3.0.10, and 3.1.x before 3.1.0.rc5 allows remote attackers to inject arbitrary web script or HTML via a malformed Unicode string, related to a "UTF-8 escaping vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=731435 - http://secunia.com/advisories/45917 - http://www.openwall.com/lists/oss-security
lla.redhat.com/show_bug.cgi?id=731435 - http://secunia.com/advisories/45917 - http://www.openwall.com/lists/oss-security/2011/08/17/1 - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065114.html - http://www.openwall.com/lists/oss-security/2011/08/22/13 - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065189.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065212.html - http://www.openwall.com/lists/oss-security/2011/08/19/11 - http://www.openwall.com/lists/oss-security/2011/08/20/1 - http://www.openwall.com/lists/oss-security/2011/08/22/14 - https://github.com/rails/rails/commit/bfc432574d0b141fd7fe759edfe9b6
www.openwall.com/lists/oss-security/2011/08/22/14 - https://github.com/rails/rails/commit/bfc432574d0b141fd7fe759edfe9b6771dd306bd - http://www.openwall.com/lists/oss-security/2011/08/22/5 - http://groups.google.com/group/rubyonrails-security/msg/f1d2749773db9f21?dmode=source&output=gplain - http://weblog.rubyonrails.org/2011/8/16/ann-rails-3-1-0-rc6
CVE ID: CVE-2011-2933 State: PUBLISHED Published: 2020-01-14T20:23:39 Last Updated: 2024-08-06T23:15:31.911Z Vendors: WebsiteBaker Products: WebsiteBaker Problem Types: Arbitrary File Upload Description: An Arbitrary File Upload vulnerability exists in admin/media/upload.php in WebsiteBaker 2.8.1 and earlier due to a failure to restrict uploaded files with .htaccess, .php4, .php5, and .phtl extensions. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2011/08/19/12
CVE ID: CVE-2011-2934 State: PUBLISHED Published: 2020-01-14T20:18:04 Last Updated: 2024-08-06T23:15:31.959Z Vendors: WebsiteBaker Products: WebsiteBaker Problem Types: CSRF Description: A Cross Site Request Forgery (CSRF) vulnerability exists in the administrator functions in WebsiteBaker 2.8.1 and earlier due to inadequate confirmation for sensitive transactions. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2011/08/19/13
CVE ID: CVE-2011-2935 State: PUBLISHED Published: 2019-11-12T13:45:01 Last Updated: 2024-08-06T23:15:32.022Z Vendors: Elgg Products: Elgg Problem Types: unspecified Description: Elgg through 1.7.10 has XSS Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-2935 - https://access.redhat.com/security/cve/cve-2011-2935 - https://oss-security.openwall.narkive.com/1UH3NYx8/cve-request-elgg-1-7-10-multiple-vulnerabilities
CVE ID: CVE-2011-2936 State: PUBLISHED Published: 2019-11-12T13:47:57 Last Updated: 2024-08-06T23:15:31.913Z Vendors: Elgg Products: Elgg Problem Types: unspecified Description: Elgg through 1.7.10 has a SQL injection vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://oss-security.openwall.narkive.com/1UH3NYx8/cve-request-elgg-1-7-10-multiple-vulnerabilities - https://security-tracker.debian.org/tracker/CVE-2011-2936 - https://access.redhat.com/security/cve/cve-2011-2936
CVE ID: CVE-2011-2937 State: PUBLISHED Published: 2011-09-21T16:00:00 Last Updated: 2024-08-06T23:15:31.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the UI messages functionality in Roundcube Webmail before 0.5.4 allows remote attackers to inject arbitrary web script or HTML via the _mbox parameter to the default URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/08/18/5 - http://www.openwall.com/lists/oss-security/2011/08/19/15 - http://trac.roundcube.net/changeset/5037 - http://www.securityfocus.com/bid/49229 - http://support.apple.com/kb/HT5130 - https://bugzil
ndcube.net/changeset/5037 - http://www.securityfocus.com/bid/49229 - http://support.apple.com/kb/HT5130 - https://bugzilla.redhat.com/show_bug.cgi?id=731786 - http://sourceforge.net/news/?group_id=139281&id=302769 - http://trac.roundcube.net/browser/tags/roundcubemail/v0.5.4/CHANGELOG - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html - http://trac.roundcube.net/ticket/1488030
CVE ID: CVE-2011-2938 State: PUBLISHED Published: 2011-09-21T16:00:00 Last Updated: 2024-08-06T23:15:31.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in filter_api.php in MantisBT before 1.2.7 allow remote attackers to inject arbitrary web script or HTML via a parameter, as demonstrated by the project_id parameter to search.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/49235 - http://www.openwall.com/lists/oss-security/2011/08/18/7 - http://security.gentoo.org/glsa/glsa-201211-01.xml - https://github.com/mantisbt/mantisbt/commit/317f3db3a3c68775de3acf3b15f55b1e3c18f9
.gentoo.org/glsa/glsa-201211-01.xml - https://github.com/mantisbt/mantisbt/commit/317f3db3a3c68775de3acf3b15f55b1e3c18f93b - http://securityreason.com/securityalert/8391 - https://bugs.gentoo.org/show_bug.cgi?id=379739 - https://bugs.launchpad.net/ubuntu/+source/mantis/+bug/828857 - http://packetstormsecurity.org/files/104149 - https://bugzilla.redhat.com/show_bug.cgi?id=731777 - http://secunia.com/advisories/51199 - http://www.openwall.com/lists/oss-security/2011/08/19/16 - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066061.html - http://www.mantisbt.org/bugs/view.php?id=13245
CVE ID: CVE-2011-2939 State: PUBLISHED Published: 2012-01-13T18:00:00 Last Updated: 2024-08-06T23:15:31.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the decode_xs function in Unicode/Unicode.xs in the Encode module before 2.44, as used in Perl before 5.15.6, might allow context-dependent attackers to cause a denial of service (memory corruption) via a crafted Unicode string, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/46989 - http://cpansearch.perl.org/src/FLORA/perl-5.14.2/pod/perldelta.pod - http://secunia.com/advisories/55314 - http://www.ubuntu.com/usn/US
ch.perl.org/src/FLORA/perl-5.14.2/pod/perldelta.pod - http://secunia.com/advisories/55314 - http://www.ubuntu.com/usn/USN-1643-1 - http://www.securityfocus.com/bid/49858 - http://www.openwall.com/lists/oss-security/2011/08/18/8 - http://perl5.git.perl.org/perl.git/commitdiff/e46d973584785af1f445c4dedbee4243419cb860#patch5 - http://secunia.com/advisories/46172 - https://bugzilla.redhat.com/show_bug.cgi?id=731246 - http://search.cpan.org/~flora/perl-5.14.2/pod/perldelta.pod#Encode_decode_xs_n-byte_heap-overflow_%28CVE-2011-2939%29 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:008 - http://www.redhat.com/support/errata/RHSA-2011-1424.html - http://www.openwall.com/lists/oss-secu
?name=MDVSA-2012:008 - http://www.redhat.com/support/errata/RHSA-2011-1424.html - http://www.openwall.com/lists/oss-security/2011/08/19/17 - http://secunia.com/advisories/51457