Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-2094 State: PUBLISHED Published: 2012-06-05T22:00:00 Last Updated: 2024-08-06T19:26:07.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the refresh mechanism in the log viewer in horizon/static/horizon/js/horizon.js in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the guest console. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49024 - https://exchange.xforce.ibmcloud.com/vulnerabilities/76136 - http://www.osvdb.org/81742 - http://ubuntu.com/usn/usn-1439-1 - https://bugs.launchpad.net/ho
om/vulnerabilities/76136 - http://www.osvdb.org/81742 - http://ubuntu.com/usn/usn-1439-1 - https://bugs.launchpad.net/horizon/+bug/977944 - http://secunia.com/advisories/49071 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079160.html - https://lists.launchpad.net/openstack/msg10211.html - https://github.com/openstack/horizon/commit/7f8c788aa70db98ac904f37fa4197fcabb802942
CVE ID: CVE-2012-2095 State: PUBLISHED Published: 2014-04-07T15:00:00 Last Updated: 2024-08-06T19:26:07.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SetWiredProperty function in the D-Bus interface in WICD before 1.7.2 allows local users to write arbitrary configuration settings and gain privileges via a crafted property name in a dbus message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48759 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668397 - http://www.securityfocus.com/bid/52987 - https://launchpad.net/wicd/+announcement/9888 - http://www.openwall.com/lists/oss-security/2012/04/11/2 - https://bugs.launchpad
launchpad.net/wicd/+announcement/9888 - http://www.openwall.com/lists/oss-security/2012/04/11/2 - https://bugs.launchpad.net/wicd/+bug/979221 - http://secunia.com/advisories/49657 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079055.html - http://www.infosecinstitute.com/courses/ethical-hacking-wicd-0day.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079029.html - http://www.openwall.com/lists/oss-security/2012/04/11/3 - http://www.exploit-db.com/exploits/18733 - http://www.gentoo.org/security/en/glsa/glsa-201206-08.xml - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079025.html - http://bazaar.launchpad.net/~wicd-d
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079025.html - http://bazaar.launchpad.net/~wicd-devel/wicd/experimental/revision/751
CVE ID: CVE-2012-2096 State: PUBLISHED Published: 2012-08-14T21:00:00Z Last Updated: 2024-09-16T18:59:34.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Fivestar module 6.x-1.x before 6.x-1.20 for Drupal does not properly validate voting data, which allows remote attackers to manipulate voting averages via a negative value in the vote parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52984 - http://www.openwall.com/lists/oss-security/2012/04/11/4 - http://drupal.org/node/1528614 - http://drupal.org/node/1528600 - http://secunia.com/advisories/48788 - http://www.openwall.com/lists/oss-security/2012/04/12/2 - http:/
rg/node/1528600 - http://secunia.com/advisories/48788 - http://www.openwall.com/lists/oss-security/2012/04/12/2 - http://drupalcode.org/project/fivestar.git/commitdiff/75dba2c
CVE ID: CVE-2012-2097 State: PUBLISHED Published: 2012-08-14T21:00:00 Last Updated: 2024-08-06T19:26:07.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Autosave module 6.x before 6.x-2.10 and 7.x-2.x before 7.x-2.0 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests involving "submitting saved results to a node." Additional Analyst Notes: - CVE Program Container: References: - http://drupalcode.org/project/autosave.git/commitdiff/f7bfd2d - http://www.openwall.com/lists/oss-security/2012/04/11/4 - http://www.openwall.com/lists/oss-security/2012/04/12/2 - https://exchange.xforce.i
om/lists/oss-security/2012/04/11/4 - http://www.openwall.com/lists/oss-security/2012/04/12/2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74838 - http://drupalcode.org/project/autosave.git/commitdiff/39f7fb0 - http://drupal.org/node/1525998 - http://drupal.org/node/1528906 - http://www.securityfocus.com/bid/52985 - http://drupal.org/node/1528864
CVE ID: CVE-2012-2098 State: PUBLISHED Published: 2012-06-29T00:00:00 Last Updated: 2024-08-06T19:26:07.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream (BZip2CompressorOutputStream) in Apache Commons Compress before 1.4.1 allows remote attackers to cause a denial of service (CPU consumption) via a file with many repeating inputs. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105060.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/75857 - http://lists.fedoraproject.org/pipermail/package-annou
ml - https://exchange.xforce.ibmcloud.com/vulnerabilities/75857 - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081697.html - http://archives.neohapsis.com/archives/bugtraq/2012-05/0130.html - http://osvdb.org/82161 - http://www.securityfocus.com/bid/53676 - http://www.securitytracker.com/id?1027096 - http://secunia.com/advisories/49255 - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081746.html - http://secunia.com/advisories/49286 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105049.html - https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5%40%3Csolr-user.lucene.apache.org%3E - htt
ache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5%40%3Csolr-user.lucene.apache.org%3E - http://commons.apache.org/compress/security.html - http://www-01.ibm.com/support/docview.wss?uid=swg21644047 - http://packetstormsecurity.org/files/113014/Apache-Commons-Compress-Apache-Ant-Denial-Of-Service.html - http://ant.apache.org/security.html - https://www.oracle.com/security-alerts/cpujan2021.html - http://www.openwall.com/lists/oss-security/2023/09/13/3
CVE ID: CVE-2012-2099 State: PUBLISHED Published: 2013-01-24T01:00:00 Last Updated: 2024-08-06T19:26:07.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Wikidforum 2.10 allow remote attackers to inject arbitrary web script or HTML via the (1) search field, or the (2) Author or (3) select_sort parameters in an advanced search. Additional Analyst Notes: - CVE Program Container: References: - http://www.wikidforum.com/forum/forum-software_29/wikidforum-support_31/sschadv2012-005-unfixed-xss-and-sql-injection-security-vulnerabilities_188.html - http://archives.neohapsis.com/archives/bugtraq/2012-03/0046.html - http://www.osvdb
-security-vulnerabilities_188.html - http://archives.neohapsis.com/archives/bugtraq/2012-03/0046.html - http://www.osvdb.org/80838 - http://www.darksecurity.de/advisories/2012/SSCHADV2012-005.txt - http://www.openwall.com/lists/oss-security/2012/04/12/12 - http://www.openwall.com/lists/oss-security/2012/04/12/5 - http://www.securityfocus.com/bid/52425 - http://www.osvdb.org/80839 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73985
CVE ID: CVE-2012-2100 State: PUBLISHED Published: 2012-07-03T16:00:00 Last Updated: 2024-08-06T19:26:07.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ext4_fill_flex_info function in fs/ext4/super.c in the Linux kernel before 3.2.2, on the x86 platform and unspecified other platforms, allows user-assisted remote attackers to trigger inconsistent filesystem-groups data and possibly cause a denial of service via a malformed ext4 filesystem containing a super block with a large FLEX_BG group size (aka s_log_groups_per_flex value). NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-4307. Additional Analyst Notes: - CVE Program Container: References: -
exists because of an incomplete fix for CVE-2009-4307. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1580.html - https://bugzilla.redhat.com/show_bug.cgi?id=809687 - http://rhn.redhat.com/errata/RHSA-2012-1445.html - http://www.securityfocus.com/bid/53414 - http://www.openwall.com/lists/oss-security/2012/04/12/11 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d50f2ab6f050311dbf7b8f5501b25f0bf64a439b - https://github.com/torvalds/linux/commit/d50f2ab6f050311dbf7b8f5501b25f0bf64a439b - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.2
CVE ID: CVE-2012-2101 State: PUBLISHED Published: 2012-06-07T19:00:00 Last Updated: 2024-08-06T19:26:08.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service (CPU and hard drive consumption) via a network request that triggers a large number of iptables rules. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openstack/nova/commit/1f644d210557b1254f7c7b39424b09a45329ade7 - http://www.osvdb.org/81641 - https://github.com/openstack/nova/commit/8c8735a73afb1
210557b1254f7c7b39424b09a45329ade7 - http://www.osvdb.org/81641 - https://github.com/openstack/nova/commit/8c8735a73afb16d5856f0aa6088e9ae406c52beb - http://ubuntu.com/usn/usn-1438-1 - https://lists.launchpad.net/openstack/msg10268.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/75243 - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079434.html - https://github.com/openstack/nova/commit/a67db4586f70ed881d65e80035b2a25be195ce64 - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079551.html - http://secunia.com/advisories/49048 - https://bugs.launchpad.net/nova/+bug/969545 - http://secunia.com/advisories/49034
CVE ID: CVE-2012-2102 State: PUBLISHED Published: 2012-08-17T00:00:00 Last Updated: 2024-08-06T19:26:07.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: MySQL 5.1.x before 5.1.62 and 5.5.x before 5.5.22 allows remote authenticated users to cause a denial of service (assertion failure and mysqld abort) by deleting a record and using HANDLER READ NEXT. Additional Analyst Notes: - CVE Program Container: References: - http://eromang.zataz.com/2012/04/10/oracle-mysql-innodb-bugs-13510739-and-63775-dos-demo/ - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-62.html - http://secunia.com/advisories/53372 - http://security.gentoo.org/glsa/glsa-201308-06.xml - http://bazaar.launchpad.ne
- http://secunia.com/advisories/53372 - http://security.gentoo.org/glsa/glsa-201308-06.xml - http://bazaar.launchpad.net/~mysql/mysql-server/5.5/revision/3097.15.15 - http://www.securityfocus.com/bid/52931 - http://dev.mysql.com/doc/refman/5.5/en/news-5-5-22.html - http://www.openwall.com/lists/oss-security/2012/04/13/7
CVE ID: CVE-2012-2103 State: PUBLISHED Published: 2012-08-26T21:00:00 Last Updated: 2024-08-06T19:26:07.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: The qmailscan plugin for Munin 1.4.5 allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1622-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74884 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668778 - http://secunia.com/advisories/51218 - http://www.openwall.com/lists/oss-security/2012/04/16/6 - http://www.openwall.com/lists/oss-security/2012/04/16/5 - http:/
tp://www.openwall.com/lists/oss-security/2012/04/16/6 - http://www.openwall.com/lists/oss-security/2012/04/16/5 - http://secunia.com/advisories/48859 - http://www.securityfocus.com/bid/53031 - https://bugzilla.redhat.com/show_bug.cgi?id=812889
CVE ID: CVE-2012-2104 State: PUBLISHED Published: 2012-08-26T21:00:00 Last Updated: 2024-08-06T19:26:07.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi-bin/munin-cgi-graph in Munin 2.x writes data to a log file without sanitizing non-printable characters, which might allow user-assisted remote attackers to inject terminal emulator escape sequences and execute arbitrary commands or delete arbitrary files via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74885 - https://support.citrix.com/article/CTX236992 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668666 - http://www.ope
https://support.citrix.com/article/CTX236992 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668666 - http://www.openwall.com/lists/oss-security/2012/04/16/6 - http://www.openwall.com/lists/oss-security/2012/04/16/5 - http://www.securityfocus.com/bid/53032
CVE ID: CVE-2012-2105 State: PUBLISHED Published: 2012-09-19T19:00:00 Last Updated: 2024-08-06T19:26:07.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in login.php in Timesheet Next Gen 1.5.2 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/04/16/7 - http://secunia.com/advisories/48239 - http://www.securityfocus.com/bid/52270 - http://sourceforge.net/apps/mantisbt/tsheetx/view.php?id=122 - http://www.exploit-db.com/exploits/18554 - http://www.openwall.com/lists/oss-secu
pps/mantisbt/tsheetx/view.php?id=122 - http://www.exploit-db.com/exploits/18554 - http://www.openwall.com/lists/oss-security/2012/04/16/4 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73680 - http://archives.neohapsis.com/archives/bugtraq/2012-03/0011.html - http://www.osvdb.org/79804
CVE ID: CVE-2012-2106 State: PUBLISHED Published: 2014-02-04T18:00:00 Last Updated: 2024-08-06T19:26:08.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the pv_import function in util/pv_import.c in Csound 5.16.6, when converting a file, allows remote attackers to execute arbitrary code via a crafted file, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48148 - http://csound.git.sourceforge.net/git/gitweb.cgi?p=csound/csound5.git%3Ba=commitdiff%3Bh=61d1df45ca9a52bab62892a3c3a13c41e6384505#patch3 - http://secunia.com/secunia_research/2012-7/ - http://www.osvdb.org/810
61d1df45ca9a52bab62892a3c3a13c41e6384505#patch3 - http://secunia.com/secunia_research/2012-7/ - http://www.osvdb.org/81016 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74647 - http://lists.opensuse.org/opensuse-updates/2012-04/msg00057.html - http://www.openwall.com/lists/oss-security/2012/04/16/1 - http://www.securityfocus.com/bid/52875 - http://csound.git.sourceforge.net/git/gitweb.cgi?p=csound/csound5.git%3Ba=commitdiff%3Bh=7d617a9551fb6c552ba16874b71266fcd90f3a6f - https://bugzilla.redhat.com/show_bug.cgi?id=810802 - http://www.openwall.com/lists/oss-security/2012/04/16/9
CVE ID: CVE-2012-2107 State: PUBLISHED Published: 2014-02-04T18:00:00 Last Updated: 2024-08-06T19:26:08.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the main function in util/lpci_main.c in Csound before 5.17.2, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted file, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74650 - http://secunia.com/advisories/48719 - http://www.osvdb.org/81015 - http://www.securityfocus.com/bid/52876 - http://csound.git.sourceforge.net/git/gitweb.cgi?p=csound/csou
svdb.org/81015 - http://www.securityfocus.com/bid/52876 - http://csound.git.sourceforge.net/git/gitweb.cgi?p=csound/csound5.git%3Ba=commitdiff%3Bh=61d1df45ca9a52bab62892a3c3a13c41e6384505#patch2 - http://secunia.com/secunia_research/2012-6/ - http://lists.opensuse.org/opensuse-updates/2012-04/msg00057.html - http://www.openwall.com/lists/oss-security/2012/04/16/1 - https://bugzilla.redhat.com/show_bug.cgi?id=810807 - http://www.openwall.com/lists/oss-security/2012/04/16/9
CVE ID: CVE-2012-2108 State: PUBLISHED Published: 2014-02-04T18:00:00 Last Updated: 2024-08-06T19:26:07.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the main function in util/lpci_main.c in Csound before 5.17.2, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2012-4/ - http://secunia.com/advisories/48719 - https://bugzilla.redhat.com/show_bug.cgi?id=810810 - http://www.osvdb.org/81015 - http://www.securityfocus.com/bid/52876 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74649
ww.osvdb.org/81015 - http://www.securityfocus.com/bid/52876 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74649 - http://csound.git.sourceforge.net/git/gitweb.cgi?p=csound/csound5.git%3Ba=commitdiff%3Bh=61d1df45ca9a52bab62892a3c3a13c41e6384505 - http://lists.opensuse.org/opensuse-updates/2012-04/msg00057.html - http://www.openwall.com/lists/oss-security/2012/04/16/1 - http://www.openwall.com/lists/oss-security/2012/04/16/9
CVE ID: CVE-2012-2109 State: PUBLISHED Published: 2012-09-04T20:00:00Z Last Updated: 2024-09-17T01:26:53.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in wp-load.php in the BuddyPress plugin 1.5.x before 1.5.5 of WordPress allows remote attackers to execute arbitrary SQL commands via the page parameter in an activity_widget_filter action. Additional Analyst Notes: - CVE Program Container: References: - http://buddypress.org/2012/03/buddypress-1-5-5/ - http://www.exploit-db.com/exploits/18690 - http://osvdb.org/80763 - http://www.openwall.com/lists/oss-security/2012/04/16/10 - http://www.openwall.com/lists/oss-security/2012/04/15/2 - http://seclis
.openwall.com/lists/oss-security/2012/04/16/10 - http://www.openwall.com/lists/oss-security/2012/04/15/2 - http://seclists.org/bugtraq/2012/Apr/4
CVE ID: CVE-2012-2110 State: PUBLISHED Published: 2012-04-19T17:00:00 Last Updated: 2024-08-06T19:26:07.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properly interpret integer data, which allows remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2
Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00007.html - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html - http://secunia.com/advisories/48899 - http://archives.neohapsis.com/archives/fulldisclosure/2012-04/0209.html - http://rhn.redhat.com/errata/RHSA-2012-1308.html - http://cvs.openssl.org/chngview?cn=22434 - http://www.mandriva.com/security/advi
redhat.com/errata/RHSA-2012-1308.html - http://cvs.openssl.org/chngview?cn=22434 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:060 - http://rhn.redhat.com/errata/RHSA-2012-1307.html - http://www.exploit-db.com/exploits/18756 - http://rhn.redhat.com/errata/RHSA-2012-0518.html - http://www.debian.org/security/2012/dsa-2454 - http://support.apple.com/kb/HT5784 - http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html - http://www.ubuntu.com/usn/USN-1424-1 - http://secunia.com/advisories/48895 - http://secunia.com/advisories/48847 - http://cvs.openssl.org/chngview?cn=22439 - http://rhn.redhat.com/errata/RHSA-2012-1306.html - http://lists.opensuse.org/opensuse-sec
penssl.org/chngview?cn=22439 - http://rhn.redhat.com/errata/RHSA-2012-1306.html - http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00015.html - http://rhn.redhat.com/errata/RHSA-2012-0522.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079149.html - http://marc.info/?l=bugtraq&m=134039053214295&w=2 - http://secunia.com/advisories/57353 - http://www.securityfocus.com/bid/53158 - http://marc.info/?l=bugtraq&m=133728068926468&w=2 - http://marc.info/?l=bugtraq&m=134039053214295&w=2 - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080176.html - http://www.collax.com/produkte/AllinOne-server-for-small-businesses#id2565578 - http://marc
ounce/2012-May/080176.html - http://www.collax.com/produkte/AllinOne-server-for-small-businesses#id2565578 - http://marc.info/?l=bugtraq&m=133951357207000&w=2 - http://secunia.com/advisories/48942 - http://www.openssl.org/news/secadv_20120419.txt - http://cvs.openssl.org/chngview?cn=22431 - http://www.securitytracker.com/id?1026957 - http://secunia.com/advisories/48999 - http://marc.info/?l=bugtraq&m=133951357207000&w=2 - http://osvdb.org/81223 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079299.html - https://kb.juniper.net/KB27376 - http://marc.info/?l=bugtraq&m=1337280689264
l/package-announce/2012-April/079299.html - https://kb.juniper.net/KB27376 - http://marc.info/?l=bugtraq&m=133728068926468&w=2
CVE ID: CVE-2012-2111 State: PUBLISHED Published: 2012-04-30T14:00:00 Last Updated: 2024-08-06T19:26:08.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) CreateAccount, (2) OpenAccount, (3) AddAccountRights, and (4) RemoveAccountRights LSA RPC procedures in smbd in Samba 3.4.x before 3.4.17, 3.5.x before 3.5.15, and 3.6.x before 3.6.5 do not properly restrict modifications to the privileges database, which allows remote authenticated users to obtain the "take ownership" privilege via an LSA connection. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1434-1 - http://osvdb.org/81648 - http://lists.opensuse.org/opensuse-securi
References: - http://www.ubuntu.com/usn/USN-1434-1 - http://osvdb.org/81648 - http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00003.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:067 - http://secunia.com/advisories/48996 - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079662.html - http://secunia.com/advisories/49017 - http://www.securitytracker.com/id?1026988 - http://marc.info/?l=bugtraq&m=134323086902585&w=2 - http://www.samba.org/samba/security/CVE-2012-2111 - http://secunia.com/advisories/48976 - http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00001.html - http://lists.fedoraproject.org/pipermail/package-announce/
ensuse.org/opensuse-security-announce/2012-05/msg00001.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079670.html - http://secunia.com/advisories/49030 - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079677.html - http://www.collax.com/produkte/AllinOne-server-for-small-businesses#id2565578 - http://secunia.com/advisories/48984 - http://secunia.com/advisories/48999 - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00023.html - http://www.debian.org/security/2012/dsa-2463 - http://marc.info/?l=bugtraq&m=134323086902585&w=2 - http://rhn.redhat.com/errata/RHSA-2012-0533.html