Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-1075 State: PUBLISHED Published: 2021-10-19T14:08:58 Last Updated: 2024-08-06T22:14:27.654Z Vendors: n/a Products: FreeBSD/crontab Problem Types: CWE-362 Description: FreeBSD's crontab calculates the MD5 sum of the previous and new cronjob to determine if any changes have been made before copying the new version in. In particular, it uses the MD5File() function, which takes a pathname as an argument, and is called with euid 0. A race condition in this process may lead to an arbitrary MD5 comparison regardless of the read permissions. Additional Analyst Notes: - CVE Program Container: References: - https://marc.info/?l=full-disclosure&m=129891323028897&w=2 - https://www.openw
s: - CVE Program Container: References: - https://marc.info/?l=full-disclosure&m=129891323028897&w=2 - https://www.openwall.com/lists/oss-security/2011/02/28/14 - https://security.netapp.com/advisory/ntap-20211125-0004/
CVE ID: CVE-2011-1076 State: PUBLISHED Published: 2011-10-05T01:00:00Z Last Updated: 2024-08-06T22:14:27.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/dns_resolver/dns_key.c in the Linux kernel before 2.6.38 allows remote DNS servers to cause a denial of service (NULL pointer dereference and OOPS) by not providing a valid response to a DNS query, as demonstrated by an erroneous grand.centrall.org query, which triggers improper handling of error data within a DNS resolver key. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1362fa078dae16776cd439791c6605b224ea6171 - http://op
ernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1362fa078dae16776cd439791c6605b224ea6171 - http://openwall.com/lists/oss-security/2011/03/04/13 - http://securitytracker.com/id?1025162 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38
CVE ID: CVE-2011-1077 State: PUBLISHED Published: 2011-06-02T20:00:00 Last Updated: 2024-08-06T22:14:27.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Apache Archiva 1.0 through 1.2.2, and 1.3.x before 1.3.5, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/518167/100/0/threaded - http://secunia.com/advisories/44693 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67672 - http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0531.html - http://archiva.apache.org/secur
lities/67672 - http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0531.html - http://archiva.apache.org/security.html - http://securityreason.com/securityalert/8267 - http://www.securityfocus.com/bid/48011 - http://archiva.apache.org/docs/1.3.5/release-notes.html
CVE ID: CVE-2011-1078 State: PUBLISHED Published: 2012-06-21T23:00:00 Last Updated: 2024-08-06T22:14:27.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sco_sock_getsockopt_old function in net/bluetooth/sco.c in the Linux kernel before 2.6.39 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via the SCO_CONNINFO option. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=681259 - https://github.com/torvalds/linux/commit/c4c896e1471aec3b004a693c689f60be3b17ac86 - http://www.openwall.com/lists/oss-security/2011/03/01/10 - http://rhn.re
mmit/c4c896e1471aec3b004a693c689f60be3b17ac86 - http://www.openwall.com/lists/oss-security/2011/03/01/10 - http://rhn.redhat.com/errata/RHSA-2012-1156.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c4c896e1471aec3b004a693c689f60be3b17ac86 - http://rhn.redhat.com/errata/RHSA-2011-0833.html - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39 - http://downloads.avaya.com/css/P8/documents/100145416
CVE ID: CVE-2011-1079 State: PUBLISHED Published: 2012-06-21T23:00:00 Last Updated: 2024-08-06T22:14:27.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bnep_sock_ioctl function in net/bluetooth/bnep/sock.c in the Linux kernel before 2.6.39 does not ensure that a certain device field ends with a '\0' character, which allows local users to obtain potentially sensitive information from kernel stack memory, or cause a denial of service (BUG and system crash), via a BNEPCONNADD command. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=681260 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit
bugzilla.redhat.com/show_bug.cgi?id=681260 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=43629f8f5ea32a998d06d1bb41eefa0e821ff573 - http://www.openwall.com/lists/oss-security/2011/03/01/10 - https://github.com/torvalds/linux/commit/43629f8f5ea32a998d06d1bb41eefa0e821ff573 - http://rhn.redhat.com/errata/RHSA-2011-0833.html - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39 - http://downloads.avaya.com/css/P8/documents/100145416 - http://packetstormsecurity.com/files/153799/Kernel-Live-Patch-Security-Notice-LSN-0053-1.html
CVE ID: CVE-2011-1080 State: PUBLISHED Published: 2012-06-21T23:00:00 Last Updated: 2024-08-06T22:14:27.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_replace function in net/bridge/netfilter/ebtables.c in the Linux kernel before 2.6.39 does not ensure that a certain name field ends with a '\0' character, which allows local users to obtain potentially sensitive information from kernel stack memory by leveraging the CAP_NET_ADMIN capability to replace a table, and then reading a modprobe command line. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/03/01/10 - http://rhn.redhat.com/errata/RHSA-2011-0833.ht
References: - http://www.openwall.com/lists/oss-security/2011/03/01/10 - http://rhn.redhat.com/errata/RHSA-2011-0833.html - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39 - https://github.com/torvalds/linux/commit/d846f71195d57b0bbb143382647c2c6638b04c5a - http://downloads.avaya.com/css/P8/documents/100145416 - https://bugzilla.redhat.com/show_bug.cgi?id=681262 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d846f71195d57b0bbb143382647c2c6638b04c5a
CVE ID: CVE-2011-1081 State: PUBLISHED Published: 2011-03-20T01:00:00 Last Updated: 2024-08-06T22:14:27.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: modrdn.c in slapd in OpenLDAP 2.4.x before 2.4.24 allows remote attackers to cause a denial of service (daemon crash) via a relative Distinguished Name (DN) modification request (aka MODRDN operation) that contains an empty value for the OldDN field. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201406-36.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/66239 - http://openwall.com/lists/oss-security/2011/03/01/15 - http://openwall.com/lists/oss-security/2011/03/
abilities/66239 - http://openwall.com/lists/oss-security/2011/03/01/15 - http://openwall.com/lists/oss-security/2011/03/01/11 - http://www.openldap.org/its/index.cgi/Software%20Bugs?id=6768 - http://www.openldap.org/lists/openldap-announce/201102/msg00000.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:056 - https://bugzilla.novell.com/show_bug.cgi?id=674985 - http://www.redhat.com/support/errata/RHSA-2011-0347.html - http://openwall.com/lists/oss-security/2011/02/28/1 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:055 - http://openwall.com/lists/oss-security/2011/02/28/2 - http://secunia.com/
.com/security/advisories?name=MDVSA-2011:055 - http://openwall.com/lists/oss-security/2011/02/28/2 - http://secunia.com/advisories/43718 - http://www.ubuntu.com/usn/USN-1100-1 - http://securitytracker.com/id?1025191 - http://www.vupen.com/english/advisories/2011/0665 - http://secunia.com/advisories/43331 - https://bugzilla.redhat.com/show_bug.cgi?id=680975 - http://www.openldap.org/devel/cvsweb.cgi/servers/slapd/modrdn.c.diff?r1=1.170.2.8&r2=1.170.2.9
CVE ID: CVE-2011-1082 State: PUBLISHED Published: 2011-04-03T01:00:00Z Last Updated: 2024-08-06T22:14:27.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: fs/eventpoll.c in the Linux kernel before 2.6.38 places epoll file descriptors within other epoll data structures without properly checking for (1) closed loops or (2) deep chains, which allows local users to cause a denial of service (deadlock or stack memory consumption) via a crafted application that makes epoll_create and epoll_ctl system calls. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/03/02/2 - https://lkml.org/lkml/2011/2/5/220 - https://bugzilla.redhat
es: - http://openwall.com/lists/oss-security/2011/03/02/2 - https://lkml.org/lkml/2011/2/5/220 - https://bugzilla.redhat.com/show_bug.cgi?id=681575 - http://openwall.com/lists/oss-security/2011/03/02/1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=22bacca48a1755f79b7e0f192ddb9fbb7fc6e64e - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38
CVE ID: CVE-2011-1083 State: PUBLISHED Published: 2011-04-03T01:00:00 Last Updated: 2024-08-06T22:14:27.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: The epoll implementation in the Linux kernel 2.6.37.2 and earlier does not properly traverse a tree of epoll file descriptors, which allows local users to cause a denial of service (CPU consumption) via a crafted application that makes epoll_create and epoll_ctl system calls. Additional Analyst Notes: - CVE Program Container: References: - http://article.gmane.org/gmane.linux.kernel/1105888 - http://secunia.com/advisories/43522 - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html - http://openwall.com/l
om/advisories/43522 - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html - http://openwall.com/lists/oss-security/2011/03/02/2 - http://article.gmane.org/gmane.linux.kernel/1106686 - http://secunia.com/advisories/48898 - https://bugzilla.redhat.com/show_bug.cgi?id=681578 - http://secunia.com/advisories/48410 - http://article.gmane.org/gmane.linux.kernel/1105744 - http://secunia.com/advisories/48964 - http://openwall.com/lists/oss-security/2011/03/02/1 - http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html - http://secunia.com/advisories/48115 - http://rhn.redhat.com/errata/RHSA-2012-0862.html - http://www.osvdb.org/71265
CVE ID: CVE-2011-1084 State: PUBLISHED Published: 2020-02-07T20:50:50 Last Updated: 2024-08-06T22:14:27.832Z Vendors: Smoothwall Products: Smoothwall Express Problem Types: Cross-Site Scripting Description: A cross-site scripting (XSS) vulnerability in Smoothwall Express 3. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2011/03/03/7
CVE ID: CVE-2011-1085 State: PUBLISHED Published: 2020-02-07T20:51:58 Last Updated: 2024-08-06T22:14:27.804Z Vendors: Smoothwall Products: Smoothwall Express Problem Types: Cross-Site Request Forgery Description: CSRF vulnerability in Smoothwall Express 3. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2011/03/03/7
CVE ID: CVE-2011-1086 State: PUBLISHED Published: 2020-02-07T21:06:27 Last Updated: 2024-08-06T22:14:27.770Z Vendors: Openfiler Products: Openfiler Problem Types: Cross-Site Scripting Description: Cross-site scripting (XSS) vulnerability in admin/system.html in Openfiler 2.3 allows remote attackers to inject arbitrary web script or HTML via the device parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2011/03/03/7 - https://web.archive.org/web/20111223190840/http://secunia.com/advisories/42507/ - https://www.exploit-db.com/exploits/35125
CVE ID: CVE-2011-1087 State: PUBLISHED Published: 2011-05-03T19:00:00 Last Updated: 2024-08-06T22:14:27.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in VideoLAN VLC media player 1.0.5 allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .mp3 file that is played during bookmark creation. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/03/03/9 - http://openwall.com/lists/oss-security/2011/03/03/8 - http://secunia.com/advisories/38853 - http://openwall.com/lists/oss-security/2011/03/02/3 - http://
urity/2011/03/03/8 - http://secunia.com/advisories/38853 - http://openwall.com/lists/oss-security/2011/03/02/3 - http://www.securityfocus.com/bid/38569 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4931.php - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14532 - http://www.osvdb.org/62728 - http://openwall.com/lists/oss-security/2011/03/28/7
CVE ID: CVE-2011-1088 State: PUBLISHED Published: 2011-03-14T19:00:00 Last Updated: 2024-08-06T22:14:27.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tomcat 7.x before 7.0.10 does not follow ServletSecurity annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests to a web application. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/65971 - http://www.securityfocus.com/archive/1/517013/100/0/threaded - http://secunia.com/advisories/43684 - http://www.securityfocus.com/bid/46685 - http://www.vupen.com/english/advisories/2011/0563 - http://tomcat.apache.org/s
http://www.securityfocus.com/bid/46685 - http://www.vupen.com/english/advisories/2011/0563 - http://tomcat.apache.org/security-7.html - http://svn.apache.org/viewvc?view=revision&revision=1076587 - http://www.osvdb.org/71027 - http://www.securitytracker.com/id?1025215 - http://mail-archives.apache.org/mod_mbox/www-announce/201103.mbox/%3C4D6E74FF.7050106%40apache.org%3E - http://svn.apache.org/viewvc?view=revision&revision=1076586 - http://markmail.org/message/lzx5273wsgl5pob6 - http://svn.apache.org/viewvc?view=revision&revision=1077995 - http://markmail.org/message/yzmyn44f5aetmm2r
CVE ID: CVE-2011-1089 State: PUBLISHED Published: 2011-04-10T01:29:00 Last Updated: 2024-08-06T22:14:27.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: The addmntent function in the GNU C Library (aka glibc or libc6) 2.13 and earlier does not report an error status for failed attempts to write to the /etc/mtab file, which makes it easier for local users to trigger corruption of this file, as demonstrated by writes from a process with a small RLIMIT_FSIZE value, a different vulnerability than CVE-2010-0296. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/03/14/5 - http://openwall.com/lists/oss-security/2011/03/04/9 -
eferences: - http://openwall.com/lists/oss-security/2011/03/14/5 - http://openwall.com/lists/oss-security/2011/03/04/9 - http://sourceware.org/bugzilla/show_bug.cgi?id=12625 - http://openwall.com/lists/oss-security/2011/03/22/6 - http://www.securityfocus.com/bid/46740 - http://openwall.com/lists/oss-security/2011/03/22/4 - http://openwall.com/lists/oss-security/2011/03/05/7 - https://bugzilla.redhat.com/show_bug.cgi?id=688980 - http://openwall.com/lists/oss-security/2011/03/07/9 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:178 - http://openwall.com/lists/oss-security/2011/04/01/2 - http://openwall.com/lists/oss-security/2011/03/04/10 - http://openwall.com/lists/oss-security/
s-security/2011/04/01/2 - http://openwall.com/lists/oss-security/2011/03/04/10 - http://openwall.com/lists/oss-security/2011/03/14/16 - http://openwall.com/lists/oss-security/2011/03/31/4 - http://openwall.com/lists/oss-security/2011/03/04/12 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:179 - http://openwall.com/lists/oss-security/2011/03/14/7 - http://openwall.com/lists/oss-security/2011/03/04/11 - http://openwall.com/lists/oss-security/2011/03/05/3 - http://www.redhat.com/support/errata/RHSA-2011-1526.html - http://openwall.com/lists/oss-security/2011/03/31/3 - http://openwall.com/lists/oss-security/2011/03/15/6
CVE ID: CVE-2011-1090 State: PUBLISHED Published: 2011-05-09T19:00:00 Last Updated: 2024-08-06T22:14:27.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: The __nfs4_proc_set_acl function in fs/nfs/nfs4proc.c in the Linux kernel before 2.6.38 stores NFSv4 ACL data in memory that is allocated by kmalloc but not properly freed, which allows local users to cause a denial of service (panic) via a crafted attempt to set an ACL. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/03/07/2 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - http://securitytracker.com/id?1025336 -
cus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - http://securitytracker.com/id?1025336 - https://bugzilla.redhat.com/show_bug.cgi?id=682641 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e9e3d724e2145f5039b423c290ce2b2c3d8f94bc - http://openwall.com/lists/oss-security/2011/03/07/12 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
CVE ID: CVE-2011-1091 State: PUBLISHED Published: 2011-03-14T19:00:00 Last Updated: 2024-08-06T22:14:27.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: libymsg.c in the Yahoo! protocol plugin in libpurple in Pidgin 2.6.0 through 2.7.10 allows (1) remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a malformed YMSG notification packet, and allows (2) remote Yahoo! servers to cause a denial of service (NULL pointer dereference and application crash) via a malformed YMSG SMS message. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0661 - http://www.redhat.com/su
tes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0661 - http://www.redhat.com/support/errata/RHSA-2011-0616.html - https://hermes.opensuse.org/messages/13195955 - http://developer.pidgin.im/viewmtn/revision/diff/5cbe18129b6e7c660bc093f7e5e1414ceca17d04/with/a7c415abba1f5f01f79295337518837f73d99bb7/libpurple/protocols/yahoo/libymsg.c - http://www.pidgin.im/news/security/?id=51 - http://www.securityfocus.com/bid/46837 - https://bugzilla.redhat.com/show_bug.cgi?id=683031 - http://www.vupen.com/english/advisories/2011/0703 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056309.html - http://secunia.com/advisories/43721 - http://slack
fedoraproject.org/pipermail/package-announce/2011-March/056309.html - http://secunia.com/advisories/43721 - http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.466884 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66055 - http://secunia.com/advisories/46376 - http://secunia.com/advisories/43695 - http://www.redhat.com/support/errata/RHSA-2011-1371.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18402 - http://www.vupen.com/english/advisories/2011/0669 - http://developer.pidgin.im/viewmtn/revision/info/a7c415abba1f5f01f79295337518837f73d99bb7 - http://lists.fedoraproject.org/pipermail/package-announce/
wmtn/revision/info/a7c415abba1f5f01f79295337518837f73d99bb7 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055874.html - http://www.vupen.com/english/advisories/2011/0643
CVE ID: CVE-2011-1092 State: PUBLISHED Published: 2011-03-15T17:00:00 Last Updated: 2024-08-06T22:14:27.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in ext/shmop/shmop.c in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (crash) and possibly read sensitive memory via a large third argument to the shmop_read function. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=683183 - http://securityreason.com/securityalert/8130 - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65988 - http://www.securityfocus.com/bid/4
&m=133469208622507&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65988 - http://www.securityfocus.com/bid/46786 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:053 - http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/ext/shmop/shmop.c?r1=306939&r2=309018&pathrev=309018 - http://www.php.net/releases/5_3_6.php - http://www.php.net/ChangeLog-5.php - http://www.php.net/archive/2011.php - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://www.openwall.com/lists/oss-security/2011/03/08/11 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:052 - http://www.exploit-db.com/exp
security/2011/03/08/11 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:052 - http://www.exploit-db.com/exploits/16966 - http://www.openwall.com/lists/oss-security/2011/03/08/9 - http://www.vupen.com/english/advisories/2011/0744 - http://support.apple.com/kb/HT5002 - http://bugs.php.net/bug.php?id=54193
CVE ID: CVE-2011-1093 State: PUBLISHED Published: 2011-07-18T22:00:00 Last Updated: 2024-08-06T22:14:27.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dccp_rcv_state_process function in net/dccp/input.c in the Datagram Congestion Control Protocol (DCCP) implementation in the Linux kernel before 2.6.38 does not properly handle packets for a CLOSED endpoint, which allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) by sending a DCCP-Close packet followed by a DCCP-Reset packet. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=720dc34bbbe9493c
ontainer: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=720dc34bbbe9493c7bd48b2243058b4e447a929d - http://www.securityfocus.com/bid/46793 - http://rhn.redhat.com/errata/RHSA-2011-0833.html - https://bugzilla.redhat.com/show_bug.cgi?id=682954 - http://openwall.com/lists/oss-security/2011/03/08/4 - http://openwall.com/lists/oss-security/2011/03/08/19 - http://downloads.avaya.com/css/P8/documents/100145416 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38
CVE ID: CVE-2011-1094 State: PUBLISHED Published: 2011-03-16T22:00:00 Last Updated: 2024-08-06T22:14:27.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: kio/kio/tcpslavebase.cpp in KDE KSSL in kdelibs before 4.6.1 does not properly verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a certificate issued by a legitimate Certification Authority for an IP address, a different vulnerability than CVE-2009-2702. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0990 - http://www.mandriva.com/security/advis
gram Container: References: - http://www.vupen.com/english/advisories/2011/0990 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:071 - http://www.securityfocus.com/bid/46789 - http://secunia.com/advisories/44108 - http://www.ubuntu.com/usn/USN-1110-1 - http://www.vupen.com/english/advisories/2011/0913 - https://projects.kde.org/projects/kde/kdelibs/repository/revisions/76f935197599a335a5fe09b78751ddb455248cf7 - http://openwall.com/lists/oss-security/2011/03/08/13 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65986 - http://openwall.com/lists/oss-security/2011/03/08/20