Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
unia.com/advisories/42384 - http://archives.neohapsis.com/archives/fulldisclosure/2010-09/0278.html - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://www.redhat.com/support/errata/RHSA-2010-0842.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:247 - http://www.vupen.com/english/advisories/2011/0298 - http://www.redhat.com/support/errata/RHSA-2010-0882.html - http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.36-rc4-git2.log - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html - http://blog.ksplice.com/2010/09/cve-2010-3081/ - http://secunia.com/advisories/43315 - http://lists.opensuse.org/opensuse-secu
/blog.ksplice.com/2010/09/cve-2010-3081/ - http://secunia.com/advisories/43315 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - http://archives.neohapsis.com/archives/fulldisclosure/2010-09/0273.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c41d68a513c71e35a14f66d71782d27a79a81ea6 - http://www.redhat.com/support/errata/RHSA-2010-0758.html - http://www.securityfocus.com/archive/1/516397/100/0/threaded - https://bugzilla.redhat.com/show_bug.cgi?id=634457 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:214 - http://marc.info/?l=oss-security&m=12846
i?id=634457 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:214 - http://marc.info/?l=oss-security&m=128461522230211&w=2
CVE ID: CVE-2010-3082 State: PUBLISHED Published: 2010-09-14T18:00:00 Last Updated: 2024-08-07T02:55:46.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Django 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via a csrfmiddlewaretoken (aka csrf_token) cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1004-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61729 - http://www.securityfocus.com/bid/43116 - http://marc.info/?l=oss-security&m=128403961700444&w=2 - https://bugzilla.redhat.com/show_bug.cgi?id=632239 - http://www.djangoproject.com/web
s-security&m=128403961700444&w=2 - https://bugzilla.redhat.com/show_bug.cgi?id=632239 - http://www.djangoproject.com/weblog/2010/sep/08/security-release/
CVE ID: CVE-2010-3083 State: PUBLISHED Published: 2010-10-12T20:00:00 Last Updated: 2024-08-07T02:55:46.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: sys/ssl/SslSocket.cpp in qpidd in Apache Qpid, as used in Red Hat Enterprise MRG before 1.2.2 and other products, when SSL is enabled, allows remote attackers to cause a denial of service (daemon outage) by connecting to the SSL port but not participating in an SSL handshake. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0756.html - http://www.openwall.com/lists/oss-security/2010/10/08/1 - https://bugzilla.redhat.com/show_bug.cgi?id=632657 - http://svn.apache.or
openwall.com/lists/oss-security/2010/10/08/1 - https://bugzilla.redhat.com/show_bug.cgi?id=632657 - http://svn.apache.org/viewvc/qpid/trunk/qpid/cpp/src/qpid/sys/ssl/SslSocket.cpp?r1=790291&r2=790290&pathrev=790291&view=patch - http://secunia.com/advisories/41710 - http://www.redhat.com/support/errata/RHSA-2010-0757.html
CVE ID: CVE-2010-3084 State: PUBLISHED Published: 2010-09-29T16:00:00 Last Updated: 2024-08-07T02:55:46.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the niu_get_ethtool_tcam_all function in drivers/net/niu.c in the Linux kernel before 2.6.36-rc4 allows local users to cause a denial of service or possibly have unspecified other impact via the ETHTOOL_GRXCLSRLALL ethtool command. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1000-1 - http://www.securityfocus.com/bid/43098 - http://www.openwall.com/lists/oss-security/2010/09/11/1 - http://www.openwall.com/lists/oss-security/2010/09/09/1 - http://git.kernel.or
all.com/lists/oss-security/2010/09/11/1 - http://www.openwall.com/lists/oss-security/2010/09/09/1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ee9c5cfad29c8a13199962614b9b16f1c4137ac9 - https://bugzilla.redhat.com/show_bug.cgi?id=632069 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://www.redhat.com/support/errata/RHSA-2010-0842.html - http://www.vupen.com/english/advisories/2011/0298 - http://www.spinics.net/lists/netdev/msg140133.html - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.36-rc4
CVE ID: CVE-2010-3085 State: PUBLISHED Published: 2010-10-12T20:00:00Z Last Updated: 2024-09-16T23:41:45.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: The network-play implementation in Mednafen before 0.8.D might allow remote servers to execute arbitrary code via unspecified vectors, related to "stack manipulation" issues. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/09/11/3 - http://www.openwall.com/lists/oss-security/2010/09/09/8 - http://sourceforge.net/news/?group_id=150840&id=287363
CVE ID: CVE-2010-3086 State: PUBLISHED Published: 2011-01-14T22:00:00 Last Updated: 2024-08-07T02:55:46.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: include/asm-x86/futex.h in the Linux kernel before 2.6.25 does not properly implement exception fixup, which allows local users to cause a denial of service (panic) via an invalid application that triggers a page fault. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=633170 - http://securitytracker.com/id?1024709 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - http://kerneltrap.org/mailarchive/linux-kernel/2008/2
ve/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - http://kerneltrap.org/mailarchive/linux-kernel/2008/2/6/752194/thread - https://bugzilla.redhat.com/show_bug.cgi?id=429412 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9d55b9923a1b7ea8193b8875c57ec940dc2ff027 - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html - http://www.redhat.com/support/errata/RHSA-2010-0839.html - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25 - http://marc.info/?l=oss-security&m=128935856605589&w=2
CVE ID: CVE-2010-3087 State: PUBLISHED Published: 2010-09-28T17:00:00 Last Updated: 2024-08-07T02:55:46.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibTIFF before 3.9.2-5.2.1 in SUSE openSUSE 11.3 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted TIFF image. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.novell.com/show_bug.cgi?id=624215 - http://blackberry.com/btsc/KB27244 - http://security.gentoo.org/glsa/glsa-201209-02.xml - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - http://support.novell.com/security/cve/CVE-2010-3087.html - http
.org/opensuse-security-announce/2010-09/msg00006.html - http://support.novell.com/security/cve/CVE-2010-3087.html - http://secunia.com/advisories/50726
CVE ID: CVE-2010-3088 State: PUBLISHED Published: 2010-10-08T20:00:00Z Last Updated: 2024-09-17T00:25:36.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: The notify function in pidgin-knotify.c in the pidgin-knotify plugin 0.2.1 and earlier for Pidgin allows remote attackers to execute arbitrary commands via shell metacharacters in a message. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/09/13/4 - http://www.openwall.com/lists/oss-security/2010/09/12/1 - https://bugs.gentoo.org/show_bug.cgi?id=336916 - http://code.google.com/p/pidgin-knotify/issues/detail?id=1
CVE ID: CVE-2010-3089 State: PUBLISHED Published: 2010-09-15T19:00:00 Last Updated: 2024-08-07T02:55:46.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in GNU Mailman before 2.1.14rc1 allow remote authenticated users to inject arbitrary web script or HTML via vectors involving (1) the list information field or (2) the list description field. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=oss-security&m=128438736513097&w=2 - http://www.redhat.com/support/errata/RHSA-2011-0307.html - http://marc.info/?l=oss-security&m=128441369020123&w=2 - http://lists.fedoraproject.org/pipermail/package-a
-0307.html - http://marc.info/?l=oss-security&m=128441369020123&w=2 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052297.html - http://secunia.com/advisories/43294 - http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html - http://www.vupen.com/english/advisories/2011/0460 - http://lists.opensuse.org/opensuse-updates/2011-05/msg00000.html - http://www.debian.org/security/2011/dsa-2170 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052312.html - http://secunia.com/advisories/42502 - http://marc.info/?l=oss-security&m=128441135117819&w=2 - https://launchpad.net/mailman/+milestone/2.1.14rc1 - http://www.ubuntu.com/usn/USN
=oss-security&m=128441135117819&w=2 - https://launchpad.net/mailman/+milestone/2.1.14rc1 - http://www.ubuntu.com/usn/USN-1069-1 - http://www.redhat.com/support/errata/RHSA-2011-0308.html - http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html - http://marc.info/?l=oss-security&m=128440851513718&w=2 - http://secunia.com/advisories/41265 - http://www.vupen.com/english/advisories/2011/0436 - http://mail.python.org/pipermail/mailman-announce/2010-September/000151.html - http://www.vupen.com/english/advisories/2010/3271 - http://marc.info/?l=oss-security&m=128441237618793&w=2 - http://secunia.com/advisories/43425 - http://www.vupen.com/english/advisories/2011/0542 - https://bug
441237618793&w=2 - http://secunia.com/advisories/43425 - http://www.vupen.com/english/advisories/2011/0542 - https://bugzilla.redhat.com/show_bug.cgi?id=631881 - https://bugzilla.redhat.com/show_bug.cgi?id=631859 - http://secunia.com/advisories/43580 - http://mail.python.org/pipermail/mailman-announce/2010-September/000150.html - http://secunia.com/advisories/43549 - http://support.apple.com/kb/HT4581
CVE ID: CVE-2010-3090 State: REJECTED Published: 2014-02-10T17:00:00 Last Updated: 2014-02-10T16:57:01 Description: No description available.
CVE ID: CVE-2010-3091 State: PUBLISHED Published: 2010-09-29T16:00:00Z Last Updated: 2024-09-17T01:26:50.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal, violates the OpenID 2.0 protocol by not verifying the openid.return_to value, which allows remote attackers to bypass authentication by leveraging an assertion from an OpenID provider. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/880480 - http://www.debian.org/security/2010/dsa-2113 - http://marc.info/?l=oss-security&m=128440896914512&w=2 - http://www.securityfocus.com/bid/42388 - http:/
2010/dsa-2113 - http://marc.info/?l=oss-security&m=128440896914512&w=2 - http://www.securityfocus.com/bid/42388 - http://drupal.org/node/880476 - http://marc.info/?l=oss-security&m=128418560705305&w=2
CVE ID: CVE-2010-3092 State: PUBLISHED Published: 2010-09-21T19:00:00Z Last Updated: 2024-09-16T17:33:33.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: The upload module in Drupal 5.x before 5.23 and 6.x before 6.18 does not properly support case-insensitive filename handling in a database configuration, which allows remote authenticated users to bypass the intended restrictions on downloading a file by uploading a different file with a similar name. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2010/dsa-2113 - http://marc.info/?l=oss-security&m=128440896914512&w=2 - http://drupal.org/node/880476 - http://marc.info/?l=oss-sec
3 - http://marc.info/?l=oss-security&m=128440896914512&w=2 - http://drupal.org/node/880476 - http://marc.info/?l=oss-security&m=128418560705305&w=2 - http://www.securityfocus.com/bid/42391
CVE ID: CVE-2010-3093 State: PUBLISHED Published: 2010-09-21T19:00:00Z Last Updated: 2024-09-16T20:53:14.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: The comment module in Drupal 5.x before 5.23 and 6.x before 6.18 allows remote authenticated users with certain privileges to bypass intended access restrictions and reinstate removed comments via a crafted URL, related to an "unpublishing bypass" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2010/dsa-2113 - http://marc.info/?l=oss-security&m=128440896914512&w=2 - http://drupal.org/node/880476 - http://marc.info/?l=oss-security&m=128418560705305&w=2 - http://www.securit
914512&w=2 - http://drupal.org/node/880476 - http://marc.info/?l=oss-security&m=128418560705305&w=2 - http://www.securityfocus.com/bid/42391
CVE ID: CVE-2010-3094 State: PUBLISHED Published: 2010-09-21T19:00:00Z Last Updated: 2024-09-16T20:07:46.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Drupal 6.x before 6.18 allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via (1) an action description, (2) an action message, (3) a node, or (4) a taxonomy term, related to the actions feature and the trigger module. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2010/dsa-2113 - http://marc.info/?l=oss-security&m=128440896914512&w=2 - http://drupal.org/node/880476 - http://marc
ity/2010/dsa-2113 - http://marc.info/?l=oss-security&m=128440896914512&w=2 - http://drupal.org/node/880476 - http://marc.info/?l=oss-security&m=128418560705305&w=2 - http://www.securityfocus.com/bid/42391
CVE ID: CVE-2010-3095 State: PUBLISHED Published: 2019-11-12T20:24:45 Last Updated: 2024-08-07T02:55:46.806Z Vendors: mailscanner Products: mailscanner Problem Types: incomplete fix for CVE-2008-5313 Description: mailscanner before 4.79.11-2.1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files. NOTE: this issue exists because of an incomplete fix for CVE-2008-5313. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-3095 - https://access.redhat.com/security/cve/cve-2010-3095 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=596403 - https://www.openwall.com/lists/oss-security
e/cve-2010-3095 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=596403 - https://www.openwall.com/lists/oss-security/2010/09/13/9
CVE ID: CVE-2010-3096 State: PUBLISHED Published: 2010-08-20T19:00:00 Last Updated: 2024-08-07T02:55:46.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in SoftX FTP Client 3.3 and possibly earlier allows remote FTP servers to write arbitrary files via "..\" (dot dot backslash) sequences in a filename. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40973 - http://www.securityfocus.com/archive/1/513085/100/0/threaded - http://www.htbridge.ch/advisory/directory_traversal_in_softx_ftp_client.html
CVE ID: CVE-2010-3097 State: PUBLISHED Published: 2010-08-20T19:00:00Z Last Updated: 2024-09-16T23:41:06.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in WinFrigate Frigate 3 FTP client 3.36 and earlier allows remote FTP servers to overwrite arbitrary files via a "..\" (dot dot backslash) in a filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.htbridge.ch/advisory/directory_traversal_in_frigate_3_built_in_ftp_client.html - http://secunia.com/advisories/40898
CVE ID: CVE-2010-3098 State: PUBLISHED Published: 2010-08-20T19:00:00Z Last Updated: 2024-09-16T17:13:59.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in IoRush Software FTP Rush 1.1.3 and possibly earlier allows remote FTP servers to overwrite arbitrary files via a "..\" (dot dot backslash) in a filename. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40900 - http://www.htbridge.ch/advisory/directory_traversal_in_ftp_rush.html
CVE ID: CVE-2010-3099 State: PUBLISHED Published: 2010-08-20T19:00:00Z Last Updated: 2024-09-17T01:56:22.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in SmartSoft Ltd SmartFTP Client 4.0.1124.0, and possibly other versions before 4.0 Build 1133, allows remote FTP servers to overwrite arbitrary files via a "..\" (dot dot backslash) in a filename. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40899 - http://www.htbridge.ch/advisory/directory_traversal_in_smartftp.html - http://www.smartftp.com/forums/index.php?/topic/16425-
//www.htbridge.ch/advisory/directory_traversal_in_smartftp.html - http://www.smartftp.com/forums/index.php?/topic/16425-smartftp-client-40-change-log/
CVE ID: CVE-2010-3100 State: PUBLISHED Published: 2010-08-20T19:00:00Z Last Updated: 2024-09-16T23:05:27.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Porta+ FTP Client 4.1, and possibly other versions, allows remote FTP servers to overwrite arbitrary files via a directory traversal sequences in a filename. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40985 - http://www.osvdb.org/67256
CVE ID: CVE-2010-3101 State: PUBLISHED Published: 2010-08-20T21:00:00Z Last Updated: 2024-09-17T02:21:54.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in FTPx Corp FTP Explorer 10.5.19.1 for Windows, and probably earlier versions, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.htbridge.ch/advisory/directory_traversal_in_ftp_explorer.html - http://secunia.com/advisories/40901
CVE ID: CVE-2010-3102 State: PUBLISHED Published: 2010-08-20T21:00:00Z Last Updated: 2024-09-17T00:30:56.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in SiteDesigner Technologies, Inc. 3D-FTP Client 9.0 build 2, and probably earlier versions, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.htbridge.ch/advisory/directory_traversal_in_3d_ftp_client.html
CVE ID: CVE-2010-3103 State: PUBLISHED Published: 2010-08-20T21:00:00Z Last Updated: 2024-09-16T21:02:32.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in FTPGetter Team FTPGetter 3.51.0.05, and probably earlier versions, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.htbridge.ch/advisory/directory_traversal_in_ftpgetter.html
CVE ID: CVE-2010-3104 State: PUBLISHED Published: 2010-08-20T21:00:00Z Last Updated: 2024-09-17T01:51:59.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in DeskShare AutoFTP Manager 4.31, and probably earlier versions, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.htbridge.ch/advisory/directory_traversal_in_autoftp_manager.html
CVE ID: CVE-2010-3105 State: PUBLISHED Published: 2010-08-23T20:00:00 Last Updated: 2024-08-07T02:55:46.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PluginGetDriverFile function in Novell iPrint Client before 5.44 interprets an uninitialized memory location as a pointer value, which allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/42576 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11817 - ht
yfocus.com/bid/42576 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11817 - http://secunia.com/advisories/40805
CVE ID: CVE-2010-3106 State: PUBLISHED Published: 2010-08-23T20:00:00 Last Updated: 2024-08-07T02:55:46.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ienipp.ocx ActiveX control in the browser plugin in Novell iPrint Client before 5.42 does not properly validate the debug parameter, which allows remote attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via a parameter value with a crafted length, related to the ExecuteRequest method. Additional Analyst Notes: - CVE Program Container: References: - http://dvlabs.tippingpoint.com/advisory/TPTI-10-06 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Ade
ppingpoint.com/advisory/TPTI-10-06 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12044 - http://download.novell.com/Download?buildid=ftwZBxEFjIg~
CVE ID: CVE-2010-3107 State: PUBLISHED Published: 2010-08-23T20:00:00 Last Updated: 2024-08-07T02:55:46.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain ActiveX control in ienipp.ocx in the browser plugin in Novell iPrint Client before 5.42 does not properly restrict the set of files to be deleted, which allows remote attackers to cause a denial of service (recursive file deletion) via unspecified vectors related to a "logic flaw" in the CleanUploadFiles method in the nipplib.dll module. Additional Analyst Notes: - CVE Program Container: References: - http://dvlabs.tippingpoint.com/advisory/TPTI-10-05 - http://download.novell.com/Download?buildid=ftwZBxEFjIg~ - https
- http://dvlabs.tippingpoint.com/advisory/TPTI-10-05 - http://download.novell.com/Download?buildid=ftwZBxEFjIg~ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12074
CVE ID: CVE-2010-3108 State: PUBLISHED Published: 2010-08-23T20:00:00 Last Updated: 2024-08-07T02:55:46.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the browser plugin in Novell iPrint Client before 5.42 allows remote attackers to execute arbitrary code by using EMBED elements to pass parameters with long names. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-10-139/ - http://download.novell.com/Download?buildid=ftwZBxEFjIg~ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11915
CVE ID: CVE-2010-3109 State: PUBLISHED Published: 2010-08-23T20:00:00 Last Updated: 2024-08-07T02:55:46.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the browser plugin in Novell iPrint Client before 5.42 allows remote attackers to execute arbitrary code via a long operation parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-10-140/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12046 - http://download.novell.com/Download?buildid=ftwZBxEFjIg~