Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-4356 State: PUBLISHED Published: 2011-12-05T11:00:00 Last Updated: 2024-08-07T00:09:18.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: Celery 2.1 and 2.2 before 2.2.8, 2.3 before 2.3.4, and 2.4 before 2.4.4 changes the effective id but not the real id during processing of the --uid and --gid arguments to celerybeat, celeryd_detach, celeryd-multi, and celeryev, which allows local users to gain privileges via vectors involving crafted code that is executed by the worker process. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/46973 - http://www.securityfocus.com/bid/50825 - https://github.com/ask/celery/blob/master
http://secunia.com/advisories/46973 - http://www.securityfocus.com/bid/50825 - https://github.com/ask/celery/blob/master/docs/sec/CELERYSA-0001.txt - https://github.com/ask/celery/pull/544
CVE ID: CVE-2011-4357 State: PUBLISHED Published: 2011-12-10T17:00:00 Last Updated: 2024-08-07T00:09:18.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the p_cgi_error function in python/neo_cgi.c in the Python CGI Kit (neo_cgi) module for Clearsilver 0.10.5 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers that are not properly handled when creating CGI error messages using the cgi_error API function. Additional Analyst Notes: - CVE Program Container: References: - http://tech.groups.yahoo.com/group/ClearSilver/message/1422 - http://code.google.com/p/clearsi
Container: References: - http://tech.groups.yahoo.com/group/ClearSilver/message/1422 - http://code.google.com/p/clearsilver/source/detail?r=919 - http://www.debian.org/security/2011/dsa-2355 - http://osvdb.org/77419 - http://www.openwall.com/lists/oss-security/2011/11/27/1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71599 - http://secunia.com/advisories/47016
CVE ID: CVE-2011-4358 State: PUBLISHED Published: 2012-07-17T22:00:00 Last Updated: 2024-08-07T00:09:18.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle GlassFish Enterprise Server 3.0.1 and 3.1.1 allows remote attackers to affect confidentiality and integrity, related to JSF. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html - http://www.securitytracker.com/id?1027277 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE ID: CVE-2011-4359 State: REJECTED Published: 2011-12-12T18:00:00Z Last Updated: 2024-09-17T00:31:18.546Z Description: No description available.
CVE ID: CVE-2011-4360 State: PUBLISHED Published: 2012-01-08T11:00:00 Last Updated: 2024-08-07T00:09:18.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: MediaWiki before 1.17.1 allows remote attackers to obtain the page titles of all restricted pages via a series of requests involving the (1) curid or (2) oldid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-November/000104.html - https://bugzilla.redhat.com/show_bug.cgi?id=758171 - http://openwall.com/lists/oss-security/2011/11/29/6 - https://bugzilla.wikimedia.org/show_bug.cgi?id=32276 - http://openwall.com/lists/oss-security/2011/11/29/
2011/11/29/6 - https://bugzilla.wikimedia.org/show_bug.cgi?id=32276 - http://openwall.com/lists/oss-security/2011/11/29/12 - http://www.debian.org/security/2011/dsa-2366
CVE ID: CVE-2011-4361 State: PUBLISHED Published: 2012-01-08T11:00:00 Last Updated: 2024-08-07T00:09:18.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: MediaWiki before 1.17.1 does not check for read permission before handling action=ajax requests, which allows remote attackers to obtain sensitive information by (1) leveraging the SpecialUpload::ajaxGetExistsWarning function, or by (2) leveraging an extension, as demonstrated by the CategoryTree, ExtTab, and InlineEditor extensions. Additional Analyst Notes: - CVE Program Container: References: - http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-November/000104.html - https://bugzilla.redhat.com/show_bug.cgi?id=758
s.wikimedia.org/pipermail/mediawiki-announce/2011-November/000104.html - https://bugzilla.redhat.com/show_bug.cgi?id=758171 - http://openwall.com/lists/oss-security/2011/11/29/6 - https://bugzilla.wikimedia.org/show_bug.cgi?id=32616 - http://openwall.com/lists/oss-security/2011/11/29/12 - http://www.debian.org/security/2011/dsa-2366
CVE ID: CVE-2011-4362 State: PUBLISHED Published: 2011-12-24T19:00:00 Last Updated: 2024-08-07T00:09:18.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the base64_decode function in the HTTP authentication functionality (http_auth.c) in lighttpd 1.4 before 1.4.30 and 1.5 before SVN revision 2806 allows remote attackers to cause a denial of service (segmentation fault) via crafted base64 input that triggers an out-of-bounds read with a negative index. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47260 - http://archives.neohapsis.com/archives/bugtraq/2011-12/0167.html - http://www.openwall.com/lists/o
om/advisories/47260 - http://archives.neohapsis.com/archives/bugtraq/2011-12/0167.html - http://www.openwall.com/lists/oss-security/2011/11/29/8 - https://bugzilla.redhat.com/show_bug.cgi?id=758624 - http://www.debian.org/security/2011/dsa-2368 - http://www.exploit-db.com/exploits/18295 - http://blog.pi3.com.pl/?p=277 - http://download.lighttpd.net/lighttpd/security/lighttpd_sa_2011_01.txt - http://www.openwall.com/lists/oss-security/2011/11/29/13 - http://www.securitytracker.com/id?1026359 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71536 - http://redmine.lighttpd.net/issues/2370 - http://jvn.jp/en/jp/JVN37417423/index.html
CVE ID: CVE-2011-4363 State: PUBLISHED Published: 2012-10-07T21:00:00Z Last Updated: 2024-09-16T22:14:01.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: ProcessTable.pm in the Proc::ProcessTable module 0.45 for Perl, when TTY information caching is enabled, allows local users to overwrite arbitrary files via a symlink attack on /tmp/TTYDEVS. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/11/30/2 - http://www.securityfocus.com/bid/50868 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4363 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=650500 - http://secunia.com/advisories/47015 - http://www.openwall.
3 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=650500 - http://secunia.com/advisories/47015 - http://www.openwall.com/lists/oss-security/2011/11/30/3 - http://www.osvdb.org/77428 - https://rt.cpan.org/Public/Bug/Display.html?id=72862
CVE ID: CVE-2011-4364 State: PUBLISHED Published: 2012-08-20T20:00:00Z Last Updated: 2024-09-16T23:45:39.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Sierra VMD decoder in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9 and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted VMD file, related to corrupted streams. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=c0cbe36b18ab3eb13a53fe684ec1f63a00df2
gram Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=c0cbe36b18ab3eb13a53fe684ec1f63a00df2c86 - http://libav.org/releases/libav-0.6.4.changelog - http://www.mandriva.com/security/advisories?name=MDVSA-2012:076 - http://ubuntu.com/usn/usn-1320-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:074 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:075 - http://ffmpeg.org/ - http://libav.org/ - http://ubuntu.com/usn/usn-1333-1 - http://libav.org/releases/libav-0.5.6.changelog - http://libav.org/releases/libav-0.7.3.changelog - http://git.libav.org/?p=libav.git%3Ba=commit%3Bh=c0cbe36b18ab3eb13a53fe684ec1f63a00df2c86
CVE ID: CVE-2011-4365 State: REJECTED Published: 2017-07-21T19:00:00 Last Updated: 2017-07-21T18:57:01 Description: No description available.
CVE ID: CVE-2011-4366 State: REJECTED Published: 2017-07-21T19:00:00 Last Updated: 2017-07-21T18:57:01 Description: No description available.
CVE ID: CVE-2011-4367 State: PUBLISHED Published: 2014-06-19T14:00:00 Last Updated: 2024-08-07T00:09:18.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in MyFaces JavaServer Faces (JSF) in Apache MyFaces Core 2.0.x before 2.0.12 and 2.1.x before 2.1.6 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) ln parameter to faces/javax.faces.resource/web.xml or (2) the PATH_INFO to faces/javax.faces.resource/. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2012/Feb/150 - http://osvdb.org/show/osvdb/79002 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73
ulldisclosure/2012/Feb/150 - http://osvdb.org/show/osvdb/79002 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73100 - http://secunia.com/advisories/47973 - http://www.securityfocus.com/bid/51939 - http://mail-archives.apache.org/mod_mbox/myfaces-announce/201202.mbox/%3C4F33ED1F.4070007%40apache.org%3E
CVE ID: CVE-2011-4368 State: PUBLISHED Published: 2011-12-14T11:00:00 Last Updated: 2024-08-07T00:09:18.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Remote Development Services (RDS) in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb11-29.html - http://www.securitytracker.com/id?1026405
CVE ID: CVE-2011-4369 State: PUBLISHED Published: 2011-12-16T19:00:00 Last Updated: 2024-08-07T00:09:18.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the PRC component in Adobe Reader and Acrobat 9.x before 9.4.7 on Windows, Adobe Reader and Acrobat 9.x through 9.4.6 on Mac OS X, Adobe Reader and Acrobat 10.x through 10.1.1 on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, as exploited in the wild in December 2011. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opens
wild in December 2011. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00020.html - http://www.adobe.com/support/security/bulletins/apsb12-01.html - http://www.redhat.com/support/errata/RHSA-2012-0011.html - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00019.html - http://www.adobe.com/support/security/bulletins/apsb11-30.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14865 - http://www.us-cert.gov/cas/techalerts/TA11-350A.html - http://www.securityfocus.com/bid/51092
CVE ID: CVE-2011-4370 State: PUBLISHED Published: 2012-01-10T21:00:00 Last Updated: 2024-08-07T00:09:18.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-4372 and CVE-2011-4373. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb12-01.html - http://www.securityfocus.com/bid/51348 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14801 - h
tyfocus.com/bid/51348 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14801 - http://www.securitytracker.com/id?1026496
CVE ID: CVE-2011-4371 State: PUBLISHED Published: 2012-01-10T21:00:00 Last Updated: 2024-08-07T00:09:18.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb12-01.html - http://www.securityfocus.com/bid/51351 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14809 - http://www.securitytracker.com/id?1026496
CVE ID: CVE-2011-4372 State: PUBLISHED Published: 2012-01-10T21:00:00 Last Updated: 2024-08-07T00:09:18.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-4370 and CVE-2011-4373. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51349 - http://www.adobe.com/support/security/bulletins/apsb12-01.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14857 - h
letins/apsb12-01.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14857 - http://www.securitytracker.com/id?1026496
CVE ID: CVE-2011-4373 State: PUBLISHED Published: 2012-01-10T21:00:00 Last Updated: 2024-08-07T00:09:18.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-4370 and CVE-2011-4372. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51350 - http://www.adobe.com/support/security/bulletins/apsb12-01.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14615 - h
letins/apsb12-01.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14615 - http://www.securitytracker.com/id?1026496
CVE ID: CVE-2011-4374 State: PUBLISHED Published: 2012-01-19T19:00:00 Last Updated: 2024-08-07T00:09:18.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Adobe Reader 9.x before 9.4.6 on Linux allows attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb11-24.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14812
CVE ID: CVE-2011-4375 State: REJECTED Published: 2013-10-01T00:00:00Z Last Updated: 2024-09-17T00:00:37.327Z Description: No description available.
CVE ID: CVE-2011-4376 State: REJECTED Published: 2013-10-01T00:00:00Z Last Updated: 2024-09-16T18:29:35.587Z Description: No description available.
CVE ID: CVE-2011-4377 State: REJECTED Published: 2013-10-01T00:00:00Z Last Updated: 2024-09-17T03:59:17.698Z Description: No description available.
CVE ID: CVE-2011-4378 State: REJECTED Published: 2013-10-01T00:00:00Z Last Updated: 2024-09-16T23:01:45.282Z Description: No description available.
CVE ID: CVE-2011-4379 State: REJECTED Published: 2013-10-01T00:00:00Z Last Updated: 2024-09-17T01:42:01.541Z Description: No description available.
CVE ID: CVE-2011-4380 State: REJECTED Published: 2013-10-01T00:00:00Z Last Updated: 2024-09-17T02:26:48.451Z Description: No description available.
CVE ID: CVE-2011-4381 State: REJECTED Published: 2013-10-01T00:00:00Z Last Updated: 2024-09-16T20:07:42.682Z Description: No description available.
CVE ID: CVE-2011-4382 State: REJECTED Published: 2013-10-01T00:00:00Z Last Updated: 2024-09-17T03:53:48.003Z Description: No description available.
CVE ID: CVE-2011-4383 State: REJECTED Published: 2013-10-01T00:00:00Z Last Updated: 2024-09-16T16:27:34.415Z Description: No description available.
CVE ID: CVE-2011-4384 State: REJECTED Published: 2013-10-01T00:00:00Z Last Updated: 2024-09-17T00:31:49.851Z Description: No description available.
CVE ID: CVE-2011-4385 State: REJECTED Published: 2013-10-01T00:00:00Z Last Updated: 2024-09-17T04:19:32.450Z Description: No description available.
CVE ID: CVE-2011-4386 State: REJECTED Published: 2013-10-01T00:00:00Z Last Updated: 2024-09-16T23:56:27.941Z Description: No description available.
CVE ID: CVE-2011-4387 State: REJECTED Published: 2013-10-01T00:00:00Z Last Updated: 2024-09-16T18:33:51.698Z Description: No description available.
CVE ID: CVE-2011-4388 State: REJECTED Published: 2013-10-01T00:00:00Z Last Updated: 2024-09-16T23:31:22.639Z Description: No description available.
CVE ID: CVE-2011-4389 State: REJECTED Published: 2013-10-01T00:00:00Z Last Updated: 2024-09-17T02:41:44.175Z Description: No description available.
CVE ID: CVE-2011-4390 State: REJECTED Published: 2013-10-01T00:00:00Z Last Updated: 2024-09-16T18:28:24.237Z Description: No description available.
CVE ID: CVE-2011-4391 State: REJECTED Published: 2013-10-01T00:00:00Z Last Updated: 2024-09-17T03:12:31.474Z Description: No description available.
CVE ID: CVE-2011-4392 State: REJECTED Published: 2013-10-01T00:00:00Z Last Updated: 2024-09-16T19:00:46.213Z Description: No description available.
CVE ID: CVE-2011-4393 State: REJECTED Published: 2013-10-01T00:00:00Z Last Updated: 2024-09-16T21:56:32.113Z Description: No description available.
CVE ID: CVE-2011-4394 State: REJECTED Published: 2013-10-01T00:00:00Z Last Updated: 2024-09-17T03:32:42.280Z Description: No description available.
CVE ID: CVE-2011-4395 State: REJECTED Published: 2013-10-01T00:00:00Z Last Updated: 2024-09-16T20:13:19.745Z Description: No description available.
CVE ID: CVE-2011-4396 State: REJECTED Published: 2013-10-01T00:00:00Z Last Updated: 2024-09-16T16:32:53.677Z Description: No description available.
CVE ID: CVE-2011-4397 State: REJECTED Published: 2013-10-01T00:00:00Z Last Updated: 2024-09-17T01:01:54.079Z Description: No description available.
CVE ID: CVE-2011-4398 State: REJECTED Published: 2013-10-01T00:00:00Z Last Updated: 2024-09-16T17:49:11.111Z Description: No description available.
CVE ID: CVE-2011-4399 State: REJECTED Published: 2013-10-01T00:00:00Z Last Updated: 2024-09-17T02:07:09.151Z Description: No description available.
CVE ID: CVE-2011-4400 State: REJECTED Published: 2013-10-01T00:00:00Z Last Updated: 2024-09-17T00:16:25.348Z Description: No description available.
CVE ID: CVE-2011-4401 State: REJECTED Published: 2013-10-01T00:00:00Z Last Updated: 2024-09-16T17:49:04.582Z Description: No description available.
CVE ID: CVE-2011-4402 State: REJECTED Published: 2013-10-01T00:00:00Z Last Updated: 2024-09-17T00:25:49.908Z Description: No description available.
CVE ID: CVE-2011-4403 State: PUBLISHED Published: 2015-04-24T14:00:00 Last Updated: 2024-08-07T00:09:18.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Zen Cart 1.3.9h allow remote attackers to hijack the authentication of administrators for requests that (1) delete a product via a delete_product_confirm action to product.php or (2) disable a product via a setflag action to categories.php. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2012/Feb/171 - http://osvdb.org/79137
CVE ID: CVE-2011-4404 State: PUBLISHED Published: 2011-11-19T02:00:00 Last Updated: 2024-08-07T00:09:18.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware vCenter Update Manager 4.0 before Update 4 and 4.1 before Update 2 allows remote attackers to conduct directory traversal attacks and read arbitrary files via unspecified vectors, a related issue to CVE-2009-1523. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1026341 - http://jetty.codehaus.org/jetty/jetty-6/xref/org/mortbay/jetty/servlet/DefaultServlet.html - http://jetty.codehaus.org/
http://jetty.codehaus.org/jetty/jetty-6/xref/org/mortbay/jetty/servlet/DefaultServlet.html - http://jetty.codehaus.org/jetty/jetty-6/xref/org/mortbay/jetty/handler/ResourceHandler.html - http://www.vmware.com/security/advisories/VMSA-2011-0014.html
CVE ID: CVE-2011-4405 State: PUBLISHED Published: 2011-11-29T17:00:00 Last Updated: 2024-08-07T00:09:18.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cupshelpers scripts in system-config-printer in Ubuntu 11.04 and 11.10, as used by the automatic printer driver download service, uses an "insecure connection" for queries to the OpenPrinting database, which allows remote attackers to execute arbitrary code via a man-in-the-middle (MITM) attack that modifies packages or repositories. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/46909 - http://www.securityfocus.com/bid/50721 - https://exchange.xforce.ibmcloud.com/vulnerabili
secunia.com/advisories/46909 - http://www.securityfocus.com/bid/50721 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71394 - http://osvdb.org/77214 - http://www.ubuntu.com/usn/USN-1265-1
CVE ID: CVE-2011-4406 State: PUBLISHED Published: 2014-04-16T18:00:00 Last Updated: 2024-08-07T00:09:18.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Ubuntu AccountsService package before 0.6.14-1git1ubuntu1.1 does not properly drop privileges when changing language settings, which allows local users to modify arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-4406.html - http://bazaar.launchpad.net/~ubuntu-branches/ubuntu/oneiric/accountsservice/oneiric-updates/revision/21 - http://www.ubuntu.com/usn/USN-1351-1
CVE ID: CVE-2011-4407 State: PUBLISHED Published: 2014-05-14T00:00:00 Last Updated: 2024-08-07T00:09:18.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: ppa.py in Software Properties before 0.81.13.3 does not validate the server certificate when downloading PPA GPG key fingerprints, which allows man-in-the-middle (MITM) attackers to spoof GPG keys for a package repository. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1352-1 - https://bugs.launchpad.net/ubuntu/%2Bsource/software-properties/%2Bbug/915210
CVE ID: CVE-2011-4408 State: PUBLISHED Published: 2012-06-16T00:00:00 Last Updated: 2024-08-07T00:09:18.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Single Sign On Client (ubuntu-sso-client) for Ubuntu 11.04 and 11.10 does not properly validate SSL certificates when using HTTPS, which allows remote attackers to spoof a server and modify or read sensitive data via a man-in-the-middle (MITM) attack. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/76112 - http://www.ubuntu.com/usn/USN-1464-1 - http://osvdb.org/82747 - http://www.securityfocus.com/bid/53829 - http://secunia.com/advisories/49448
CVE ID: CVE-2011-4409 State: PUBLISHED Published: 2012-06-16T00:00:00 Last Updated: 2024-08-07T00:09:18.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Ubuntu One Client for Ubuntu 10.04 LTS, 11.04, 11.10, and 12.04 LTS does not properly validate SSL certificates, which allows remote attackers to spoof a server and modify or read sensitive information via a man-in-the-middle (MITM) attack. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49442 - http://ubuntu.com/usn/usn-1465-3 - http://ubuntu.com/usn/usn-1465-1 - http://www.osvdb.org/82748 - http://ubuntu.com/usn/usn-1465-2 - https://exchange.xforce.ibmcloud.com/vulnerabiliti