Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-4389 State: PUBLISHED Published: 2012-09-05T23:00:00Z Last Updated: 2024-09-16T23:46:06.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.0.7 allows remote attackers to execute arbitrary code by uploading a crafted .htaccess file in an import.zip file and accessing an uploaded PHP file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/09/02/2 - https://github.com/owncloud/core/commit/4fd069b47906ebcf83887970c732d464dbe7d37a
CVE ID: CVE-2012-4390 State: PUBLISHED Published: 2012-09-05T23:00:00Z Last Updated: 2024-09-17T03:59:01.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: (1) apps/calendar/appinfo/remote.php and (2) apps/contacts/appinfo/remote.php in ownCloud before 4.0.7 allows remote authenticated users to enumerate the registered users via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/09/02/2 - https://github.com/owncloud/core/commit/4682846d3ecdad15c6a60126dda75eb7fa97c707 - http://owncloud.org/changelog/
CVE ID: CVE-2012-4391 State: PUBLISHED Published: 2012-09-05T23:00:00Z Last Updated: 2024-09-17T00:16:37.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in core/ajax/appconfig.php in ownCloud before 4.0.7 allows remote attackers to hijack the authentication of administrators for requests that edit the app configurations. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/owncloud/core/commit/5192eecce239a0b7ade1e60a6cf03075e5cfc188 - http://www.openwall.com/lists/oss-security/2012/09/02/2 - http://owncloud.org/changelog/
CVE ID: CVE-2012-4392 State: PUBLISHED Published: 2012-09-05T23:00:00Z Last Updated: 2024-09-16T18:18:24.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in ownCloud 4.0.7 does not properly validate the oc_token cookie, which allows remote attackers to bypass authentication via a crafted oc_token cookie value. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/08/11/1 - http://www.openwall.com/lists/oss-security/2012/09/02/2 - https://github.com/owncloud/core/commit/4fd069b47906ebcf83887970c732d464dbe7d37a
CVE ID: CVE-2012-4393 State: PUBLISHED Published: 2012-09-05T23:00:00Z Last Updated: 2024-09-16T21:57:08.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in ownCloud before 4.0.6 allow remote attackers to hijack the authentication of arbitrary users for requests that use (1) addBookmark.php, (2) delBookmark.php, or (3) editBookmark.php in bookmarks/ajax/; (4) calendar/delete.php, (5) calendar/edit.php, (6) calendar/new.php, (7) calendar/update.php, (8) event/delete.php, (9) event/edit.php, (10) event/move.php, (11) event/new.php, (12) import/import.php, (13) settings/setfirstday.php, (14) settings/settimeformat.php, (1
move.php, (11) event/new.php, (12) import/import.php, (13) settings/setfirstday.php, (14) settings/settimeformat.php, (15) share/changepermission.php, (16) share/share.php, (17) or share/unshare.php in calendar/ajax/; (18) external/ajax/setsites.php, (19) files/ajax/delete.php, (20) files/ajax/move.php, (21) files/ajax/newfile.php, (22) files/ajax/newfolder.php, (23) files/ajax/rename.php, (24) files_sharing/ajax/email.php, (25) files_sharing/ajax/setpermissions.php, (26) files_sharing/ajax/share.php, (27) files_sharing/ajax/toggleresharing.php, (28) files_sharing/ajax/togglesharewitheveryone.php, (29) files_sharing/ajax/unshare.php, (30) files_texteditor/ajax/savefile.php, (31) files_versio
lesharewitheveryone.php, (29) files_sharing/ajax/unshare.php, (30) files_texteditor/ajax/savefile.php, (31) files_versions/ajax/rollbackVersion.php, (32) gallery/ajax/createAlbum.php, (33) gallery/ajax/sharing.php, (34) tasks/ajax/addtask.php, (35) tasks/ajax/addtaskform.php, (36) tasks/ajax/delete.php, or (37) tasks/ajax/edittask.php in apps/; or administrators for requests that use (38) changepassword.php, (39) creategroup.php, (40) createuser.php, (41) disableapp.php, (42) enableapp.php, (43) lostpassword.php, (44) removegroup.php, (45) removeuser.php, (46) setlanguage.php, (47) setloglevel.php, (48) setquota.php, or (49) togglegroups.php in settings/ajax/. Additional Analyst Notes: - CVE
hp, (47) setloglevel.php, (48) setquota.php, or (49) togglegroups.php in settings/ajax/. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/owncloud/core/commit/38271ded753bc9ea9943cef3c2706f8d71f3a58f - http://www.openwall.com/lists/oss-security/2012/08/11/1 - http://www.openwall.com/lists/oss-security/2012/09/02/2 - https://github.com/owncloud/core/commit/93579d88dcea389205c01ddf6da41f37ad9b8745 - http://owncloud.org/changelog/
CVE ID: CVE-2012-4394 State: PUBLISHED Published: 2012-09-05T23:00:00Z Last Updated: 2024-09-16T18:39:29.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in apps/files/js/filelist.js in ownCloud before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via the file parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/owncloud/core/commit/d203fa2c50f4b2791e68e2b8ab9a0f8b94f9c9f8 - http://www.openwall.com/lists/oss-security/2012/08/11/1 - http://www.openwall.com/lists/oss-security/2012/09/02/2
CVE ID: CVE-2012-4395 State: PUBLISHED Published: 2012-09-05T23:00:00Z Last Updated: 2024-09-16T17:54:01.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in ownCloud before 4.0.3 allows remote attackers to inject arbitrary web script or HTML via the redirect_url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/08/11/1 - http://www.openwall.com/lists/oss-security/2012/09/02/2 - https://github.com/owncloud/core/commit/0074062b5329c3d43679909fddce2d70608a4475
CVE ID: CVE-2012-4396 State: PUBLISHED Published: 2012-09-05T23:00:00Z Last Updated: 2024-09-17T03:14:34.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) file names to apps/user_ldap/settings.php; (2) url or (3) title parameter to apps/bookmarks/ajax/editBookmark.php; (4) tag or (5) page parameter to apps/bookmarks/ajax/updateList.php; (6) identity to apps/user_openid/settings.php; (7) stack name in apps/gallery/lib/tiles.php; (8) root parameter to apps/gallery/templates/index.php; (9) calendar displayname in apps/calendar/templ
y/lib/tiles.php; (8) root parameter to apps/gallery/templates/index.php; (9) calendar displayname in apps/calendar/templates/part.import.php; (10) calendar uri in apps/calendar/templates/part.choosecalendar.rowfields.php; (11) title, (12) location, or (13) description parameter in apps/calendar/lib/object.php; (14) certain vectors in core/js/multiselect.js; or (15) artist, (16) album, or (17) title comments parameter in apps/media/lib_scanner.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/owncloud/core/commit/f8337c9d723039760eecccf68bcb02752551e254 - https://github.com/owncloud/core/commit/8f616ecf76aac4a8b554fbf5a90b1645d0f25438 - https://github.co
68bcb02752551e254 - https://github.com/owncloud/core/commit/8f616ecf76aac4a8b554fbf5a90b1645d0f25438 - https://github.com/owncloud/core/commit/8f09299e2468dfc4f9ec72b05acf47de3ef9d1d7 - https://github.com/owncloud/core/commit/e817504569dce49fd7a677fa510e500394af0c48 - http://www.openwall.com/lists/oss-security/2012/08/11/1 - https://github.com/owncloud/core/commit/d294373f476c795aaee7dc2444e7edfdea01a606 - http://www.openwall.com/lists/oss-security/2012/09/02/2 - https://github.com/owncloud/core/commit/642e7ce110cb8c320072532c29abe003385d50f5 - https://github.com/owncloud/core/commit/cc653a8a408adfb4d0cd532145668aacd85ad96c - https://github.com/owncloud/core/commit/f955f6a6857754826af8903475
ore/commit/cc653a8a408adfb4d0cd532145668aacd85ad96c - https://github.com/owncloud/core/commit/f955f6a6857754826af8903475688ba54f72c1bb - https://github.com/owncloud/core/commit/44260a552cd4ee50ee11eee45164c725f56f7027
CVE ID: CVE-2012-4397 State: PUBLISHED Published: 2012-09-05T23:00:00Z Last Updated: 2024-09-17T00:47:02.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) calendar displayname to part.choosecalendar.rowfields.php or (2) part.choosecalendar.rowfields.shared.php in apps/calendar/templates/; or (3) unspecified vectors to apps/contacts/lib/vcard.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/08/11/1 - http://www.openwall.com/lists/oss-security/2012/09/02/2 - https
ttp://www.openwall.com/lists/oss-security/2012/08/11/1 - http://www.openwall.com/lists/oss-security/2012/09/02/2 - https://github.com/owncloud/core/commit/00595351400523168e18a08e3ffa5c3b1e7c1f6e - https://github.com/owncloud/core/commit/54a371700554ed21a5cb7db03126b6c95ae4cbd3 - http://owncloud.org/changelog/
CVE ID: CVE-2012-4398 State: PUBLISHED Published: 2013-02-18T02:00:00 Last Updated: 2024-08-06T20:35:09.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: The __request_module function in kernel/kmod.c in the Linux kernel before 3.4 does not set a certain killable attribute, which allows local users to cause a denial of service (memory consumption) via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://lkml.indiana.edu/hypermail/linux/kernel/1202.0/03340.html - http://rhn.redhat.com/errata/RHSA-2013-0223.html - http://www.kernel.org/pub/linux/kernel/v3.x/linux-3.4.tar.bz2 - http://www.openwall.com/lists/oss-security/2012/09/02/3 - http
/www.kernel.org/pub/linux/kernel/v3.x/linux-3.4.tar.bz2 - http://www.openwall.com/lists/oss-security/2012/09/02/3 - http://secunia.com/advisories/55077 - http://rhn.redhat.com/errata/RHSA-2013-1348.html - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html - https://bugzilla.redhat.com/show_bug.cgi?id=853474 - http://www.securityfocus.com/bid/55361
CVE ID: CVE-2012-4399 State: PUBLISHED Published: 2012-10-09T23:00:00Z Last Updated: 2024-09-16T17:14:37.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Xml class in CakePHP 2.1.x before 2.1.5 and 2.2.x before 2.2.1 allows remote attackers to read arbitrary files via XML data containing external entity references, aka an XML external entity (XXE) injection attack. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49900 - http://seclists.org/bugtraq/2012/Jul/101 - http://bakery.cakephp.org/articles/markstory/2012/07/14/security_release_-_cakephp_2_1_5_2_2_1 - http://www.exploit-db.com/exploits/19863 - http://www.osvdb.org/84042
12/07/14/security_release_-_cakephp_2_1_5_2_2_1 - http://www.exploit-db.com/exploits/19863 - http://www.osvdb.org/84042 - http://www.openwall.com/lists/oss-security/2012/09/03/1 - http://www.openwall.com/lists/oss-security/2012/09/03/2
CVE ID: CVE-2012-4400 State: PUBLISHED Published: 2012-09-19T10:00:00Z Last Updated: 2024-09-16T23:31:59.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: repository/repository_ajax.php in Moodle 2.2.x before 2.2.5 and 2.3.x before 2.3.2 allows remote authenticated users to bypass intended upload-size restrictions via a -1 value in the maxbytes field. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-30792 - http://openwall.com/lists/oss-security/2012/09/17/1 - http://moodle.org/mod/forum/discuss.php?d=211555
CVE ID: CVE-2012-4401 State: PUBLISHED Published: 2012-09-19T10:00:00Z Last Updated: 2024-09-16T21:07:27.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moodle 2.2.x before 2.2.5 and 2.3.x before 2.3.2 allows remote authenticated users to bypass intended capability restrictions and perform certain topic changes by leveraging course-editing capabilities. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-28207 - http://openwall.com/lists/oss-security/2012/09/17/1 - http://moodle.org/mod/forum/discuss.php?d=211556
CVE ID: CVE-2012-4402 State: PUBLISHED Published: 2012-09-19T10:00:00Z Last Updated: 2024-09-17T02:11:41.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: webservice/lib.php in Moodle 2.1.x before 2.1.8, 2.2.x before 2.2.5, and 2.3.x before 2.3.2 does not properly restrict the use of web-service tokens, which allows remote authenticated users to run arbitrary external-service functions via a token intended for only one service. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2012/09/17/1 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-34368 - http://moodle.org/mod/forum/discuss.php?d=211559
CVE ID: CVE-2012-4403 State: PUBLISHED Published: 2012-09-19T10:00:00Z Last Updated: 2024-09-17T01:01:03.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: theme/yui_combo.php in Moodle 2.3.x before 2.3.2 does not properly construct error responses for the drag-and-drop script, which allows remote attackers to obtain the installation path by sending a request for a nonexistent resource and then reading the response. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2012/09/17/1 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-35168 - http://moodle.org/mod/forum/discuss.php?d=211560
CVE ID: CVE-2012-4404 State: PUBLISHED Published: 2012-09-10T22:00:00 Last Updated: 2024-08-06T20:35:09.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: security/__init__.py in MoinMoin 1.9 through 1.9.4 does not properly handle group names that contain virtual group names such as "All," "Known," or "Trusted," which allows remote authenticated users with virtual group membership to be treated as a member of the group. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1604-1 - http://secunia.com/advisories/50496 - http://moinmo.in/SecurityFixes - http://www.debian.org/security/2012/dsa-2538 - http://www.openwall.com/lists/oss-securit
ttp://moinmo.in/SecurityFixes - http://www.debian.org/security/2012/dsa-2538 - http://www.openwall.com/lists/oss-security/2012/09/04/4 - http://secunia.com/advisories/50885 - http://secunia.com/advisories/50474 - http://hg.moinmo.in/moin/1.9/rev/7b9f39289e16 - http://www.openwall.com/lists/oss-security/2012/09/05/2
CVE ID: CVE-2012-4405 State: PUBLISHED Published: 2012-09-18T17:00:00 Last Updated: 2024-08-06T20:35:09.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer underflows in the icmLut_allocate function in International Color Consortium (ICC) Format library (icclib), as used in Ghostscript 9.06 and Argyll Color Management System, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted (1) PostScript or (2) PDF file with embedded images, which triggers a heap-based buffer overflow. NOTE: this issue is also described as an array index error. Additional Analyst Notes: - CVE Program Container: References: - http://rhn
e is also described as an array index error. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1256.html - http://security.gentoo.org/glsa/glsa-201412-17.xml - https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0301 - http://www.openwall.com/lists/oss-security/2012/09/11/2 - http://lists.opensuse.org/opensuse-updates/2012-10/msg00015.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:089 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:090 - http://www.securityfocus.com/bid/55494 - http://secunia.com/advisories/50719 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00031.html - http://li
://secunia.com/advisories/50719 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00031.html - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/78411 - http://www.securitytracker.com/id?1027517 - http://www.ubuntu.com/usn/USN-1581-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:151
CVE ID: CVE-2012-4406 State: PUBLISHED Published: 2012-10-22T23:00:00 Last Updated: 2024-08-06T20:35:09.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a crafted pickle object. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openstack/swift/commit/e1ff51c04554d51616d2845f92ab726cb0e5831a - http://www.securityfocus.com/bid/55420 - https://launchpad.net/swift/+milestone/1.7.0 - http://rhn.redhat.com/errata/RHSA-2012-1379.html - htt
us.com/bid/55420 - https://launchpad.net/swift/+milestone/1.7.0 - http://rhn.redhat.com/errata/RHSA-2012-1379.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/79140 - https://bugs.launchpad.net/swift/+bug/1006414 - https://bugzilla.redhat.com/show_bug.cgi?id=854757 - http://www.openwall.com/lists/oss-security/2012/09/05/4 - http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089472.html - http://rhn.redhat.com/errata/RHSA-2013-0691.html - http://www.openwall.com/lists/oss-security/2012/09/05/16
CVE ID: CVE-2012-4407 State: PUBLISHED Published: 2012-09-19T10:00:00Z Last Updated: 2024-09-16T23:35:42.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/filelib.php in Moodle 2.1.x before 2.1.8, 2.2.x before 2.2.5, and 2.3.x before 2.3.2 does not properly check the publication state of blog files, which allows remote attackers to obtain sensitive information by reading a blog entry that references a non-public file. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2012/09/17/1 - http://moodle.org/mod/forum/discuss.php?d=211557 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-34585
CVE ID: CVE-2012-4408 State: PUBLISHED Published: 2012-09-19T10:00:00Z Last Updated: 2024-09-16T19:09:13.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: course/reset.php in Moodle 2.1.x before 2.1.8, 2.2.x before 2.2.5, and 2.3.x before 2.3.2 checks an update capability instead of a reset capability, which allows remote authenticated users to bypass intended access restrictions via a reset operation. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2012/09/17/1 - http://moodle.org/mod/forum/discuss.php?d=211558 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-34519
CVE ID: CVE-2012-4409 State: PUBLISHED Published: 2012-11-21T23:00:00 Last Updated: 2024-08-06T20:35:09.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the check_file_head function in extra.c in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to execute arbitrary code via an encrypted file with a crafted header containing long salt data that is not properly handled during decryption. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2012-September/086519.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088281.html - http://packe
tember/086519.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088281.html - http://packetstormsecurity.org/files/116268/mcrypt-2.6.8-Buffer-Overflow-Proof-Of-Concept.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-September/087542.html - http://www.openwall.com/lists/oss-security/2012/09/06/4 - http://secunia.com/advisories/51010 - http://www.securitytracker.com/id?1027532 - http://secunia.com/advisories/50507 - https://bugzilla.redhat.com/show_bug.cgi?id=855029
CVE ID: CVE-2012-4410 State: REJECTED Published: 2014-04-27T00:00:00 Last Updated: 2014-04-26T23:57:01 Description: No description available.
CVE ID: CVE-2012-4411 State: PUBLISHED Published: 2012-11-23T20:00:00 Last Updated: 2024-08-06T20:35:09.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: The graphical console in Xen 4.0, 4.1 and 4.2 allows local OS guest administrators to obtain sensitive host resource information via the qemu monitor. NOTE: this might be a duplicate of CVE-2007-0998. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55082 - http://secunia.com/advisories/51413 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html - http://www.debian.org/security/2012/dsa-2543 - http://lists.
suse.org/opensuse-security-announce/2012-11/msg00008.html - http://www.debian.org/security/2012/dsa-2543 - http://lists.xen.org/archives/html/xen-announce/2012-09/msg00007.html - http://www.openwall.com/lists/oss-security/2012/09/06/2 - http://www.openwall.com/lists/oss-security/2012/09/06/7 - http://www.securityfocus.com/bid/55442 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html - http://lists.xen.org/archives/html/xen-announce/2012-09/msg00008.html - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html - http://secunia.com/advisories/51352 - http://secunia.com/advi
use.org/opensuse-security-announce/2014-03/msg00021.html - http://secunia.com/advisories/51352 - http://secunia.com/advisories/51324 - https://security.gentoo.org/glsa/201604-03 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html - http://secunia.com/advisories/50493 - http://www.openwall.com/lists/oss-security/2012/09/07/5
CVE ID: CVE-2012-4412 State: PUBLISHED Published: 2013-10-09T22:00:00 Last Updated: 2024-08-06T20:35:09.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55113 - https://bugzilla.redhat.com/show_bug.cgi?id=855385 - http://www.ubuntu.com/usn/USN-1991-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:284 - ht
?id=855385 - http://www.ubuntu.com/usn/USN-1991-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:284 - http://sourceware.org/bugzilla/show_bug.cgi?id=14547 - http://www.openwall.com/lists/oss-security/2012/09/07/9 - https://security.gentoo.org/glsa/201503-04 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:283 - http://seclists.org/fulldisclosure/2019/Jun/18 - https://seclists.org/bugtraq/2019/Jun/14 - http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html