Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
11/08/22/13 - https://bugzilla.redhat.com/show_bug.cgi?id=732156 - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065137.html - http://www.openwall.com/lists/oss-security/2011/08/19/11 - http://www.debian.org/security/2011/dsa-2301 - http://secunia.com/advisories/45921 - http://www.openwall.com/lists/oss-security/2011/08/20/1 - http://www.openwall.com/lists/oss-security/2011/08/22/14 - http://www.openwall.com/lists/oss-security/2011/08/22/5 - https://github.com/rails/rails/commit/11dafeaa7533be26441a63618be93a03869c83a9 - http://groups.google.com/group/rubyonrails-security/msg/bbe342e43abaa78c?dmode=source&output=gplain
CVE ID: CVE-2011-3187 State: PUBLISHED Published: 2011-08-29T18:00:00Z Last Updated: 2024-08-06T23:22:27.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: The to_s method in actionpack/lib/action_dispatch/middleware/remote_ip.rb in Ruby on Rails 3.0.5 does not validate the X-Forwarded-For header in requests from IP addresses on a Class C network, which might allow remote attackers to inject arbitrary text into log files or bypass intended address parsing via a crafted header. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2011-02/0337.html - http://www.openwall.com/lists/oss-security/2011/08/17/1 - http://w
apsis.com/archives/fulldisclosure/2011-02/0337.html - http://www.openwall.com/lists/oss-security/2011/08/17/1 - http://www.openwall.com/lists/oss-security/2011/08/22/13 - http://webservsec.blogspot.com/2011/02/ruby-on-rails-vulnerability.html - http://www.openwall.com/lists/oss-security/2011/08/19/11 - http://www.openwall.com/lists/oss-security/2011/08/20/1 - http://www.openwall.com/lists/oss-security/2011/08/22/14 - https://bugzilla.novell.com/show_bug.cgi?id=673010 - http://www.openwall.com/lists/oss-security/2011/08/22/5
CVE ID: CVE-2011-3188 State: PUBLISHED Published: 2012-05-24T23:00:00 Last Updated: 2024-08-06T23:22:27.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) IPv4 and (2) IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes it easier for remote attackers to cause a denial of service (disrupted networking) or hijack network sessions by predicting these values and sending crafted packets. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/bc0b96b54a21246e377122d54569eef71cec535f - http://www.openwall.com/lists/oss-secu
tps://github.com/torvalds/linux/commit/bc0b96b54a21246e377122d54569eef71cec535f - http://www.openwall.com/lists/oss-security/2011/08/23/2 - https://github.com/torvalds/linux/commit/6e5714eaf77d79ae1c8b47e3e040ff5411b717ec - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6e5714eaf77d79ae1c8b47e3e040ff5411b717ec - https://bugzilla.redhat.com/show_bug.cgi?id=732658 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1 - http://marc.info/?l=bugtraq&m=139447903326211&w=2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bc0b96b54a21246e377122d54569eef71cec535f - https://support.f5.com/csp/article/K15301?utm_source=f5support&am
=commit%3Bh=bc0b96b54a21246e377122d54569eef71cec535f - https://support.f5.com/csp/article/K15301?utm_source=f5support&amp%3Butm_medium=RSS
CVE ID: CVE-2011-3189 State: PUBLISHED Published: 2011-08-25T14:00:00 Last Updated: 2024-08-06T23:22:27.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: The crypt function in PHP 5.3.7, when the MD5 hash type is used, returns the value of the salt argument instead of the hashed string, which might allow remote attackers to bypass authentication via an arbitrary password, a different vulnerability than CVE-2011-2483. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/74726 - http://www.php.net/ChangeLog-5.php#5.3.8 - https://bugs.gentoo.org/show_bug.cgi?id=380261 - http://support.apple.com/kb/HT5130 - http://secunia.com/advisories/45678 - http://w
.gentoo.org/show_bug.cgi?id=380261 - http://support.apple.com/kb/HT5130 - http://secunia.com/advisories/45678 - http://www.openwall.com/lists/oss-security/2011/08/23/4 - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html - https://bugs.php.net/bug.php?id=55439 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69429 - http://www.php.net/archive/2011.php#id2011-08-23-1
CVE ID: CVE-2011-3190 State: PUBLISHED Published: 2011-08-31T23:00:00 Last Updated: 2024-08-06T23:29:55.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain AJP protocol connector implementations in Apache Tomcat 7.0.0 through 7.0.20, 6.0.0 through 6.0.33, 5.5.0 through 5.5.33, and possibly other versions allow remote attackers to spoof AJP requests, bypass authentication, and obtain sensitive information by causing the connector to interpret a request body as a new request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45748 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69472 - http://www.mandriva.com/security/advi
om/advisories/45748 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69472 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:156 - http://www.debian.org/security/2012/dsa-2401 - http://www.securitytracker.com/id?1025993 - http://secunia.com/advisories/48308 - http://secunia.com/advisories/49094 - http://marc.info/?l=bugtraq&m=136485229118404&w=2 - http://www.securityfocus.com/bid/49353 - http://securityreason.com/securityalert/8362 - http://marc.info/?l=bugtraq&m=133469267822771&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19465 - http://marc.info/?l=bugtraq&m=132215163318824&w=2 - https://oval.cisecurity.org/repository/search
e.oval%3Adef%3A19465 - http://marc.info/?l=bugtraq&m=132215163318824&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14933 - http://secunia.com/advisories/57126 - http://marc.info/?l=bugtraq&m=133469267822771&w=2 - http://www.securityfocus.com/archive/1/519466/100/0/threaded - http://marc.info/?l=bugtraq&m=132215163318824&w=2 - http://marc.info/?l=bugtraq&m=136485229118404&w=2 - https://issues.apache.org/bugzilla/show_bug.cgi?id=51698 - http://marc.info/?l=bugtraq&m=139344343412337&w=2 - https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html
634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2011-3191 State: PUBLISHED Published: 2012-05-24T23:00:00Z Last Updated: 2024-08-06T23:29:55.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the CIFSFindNext function in fs/cifs/cifssmb.c in the Linux kernel before 3.1 allows remote CIFS servers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a large length value in a response to a read request for a directory. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9438fabb73eb48055b58b89fc51e0bc4db22fabd - http://www.openwall.com/lists/oss-security/20
ds/linux-2.6.git%3Ba=commit%3Bh=9438fabb73eb48055b58b89fc51e0bc4db22fabd - http://www.openwall.com/lists/oss-security/2011/08/24/2 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1 - https://bugzilla.redhat.com/show_bug.cgi?id=732869 - https://github.com/torvalds/linux/commit/9438fabb73eb48055b58b89fc51e0bc4db22fabd
CVE ID: CVE-2011-3192 State: PUBLISHED Published: 2011-08-29T15:00:00 Last Updated: 2024-08-06T23:29:55.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as exploited in the wild in August 2011, a different vulnerability than CVE-2007-0086. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45606 - http://www.redhat.com/support/errata/RHSA-2011-1369.html - http://www.redhat.com/support/errata/
.com/advisories/45606 - http://www.redhat.com/support/errata/RHSA-2011-1369.html - http://www.redhat.com/support/errata/RHSA-2011-1329.html - http://marc.info/?l=bugtraq&m=131731002122529&w=2 - http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00011.html - http://marc.info/?l=bugtraq&m=134987041210674&w=2 - http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00006.html - http://www.gossamer-threads.com/lists/apache/dev/401638 - http://securitytracker.com/id?1025960 - http://mail-archives.apache.org/mod_mbox/httpd-dev/201108.mbox/%3cCAAPSnn2PO-d-C4nQt_TES2RRWiZr7urefhTKPWBC1b+K1Dqc7g%40mail.gmail.com%3e - https://bugzilla.redhat.com/show_bug.cgi?id=732928 - http://ww
Qt_TES2RRWiZr7urefhTKPWBC1b+K1Dqc7g%40mail.gmail.com%3e - https://bugzilla.redhat.com/show_bug.cgi?id=732928 - http://www.oracle.com/technetwork/topics/security/alert-cve-2011-3192-485304.html - http://marc.info/?l=bugtraq&m=133477473521382&w=2 - http://www.exploit-db.com/exploits/17696 - https://issues.apache.org/bugzilla/show_bug.cgi?id=51714 - http://marc.info/?l=bugtraq&m=131551295528105&w=2 - http://secunia.com/advisories/46000 - http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html - http://blogs.oracle.com/security/entry/security_alert_for_cve_2011 - http://marc.info/?l=bugtraq&m=134987041210674&w=2 - http://marc.info/?l=bugtraq&m=132033751509019&w=2 - http://www.ci
- http://marc.info/?l=bugtraq&m=134987041210674&w=2 - http://marc.info/?l=bugtraq&m=132033751509019&w=2 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b90d73.shtml - http://www.ubuntu.com/usn/USN-1199-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:130 - http://www.securityfocus.com/bid/49303 - http://osvdb.org/74721 - https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0 - http://archives.neohapsis.com/archives/fulldisclosure/2011-08/0285.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mit
ives/Security-announce/2011//Oct/msg00003.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14824 - http://mail-archives.apache.org/mod_mbox/httpd-announce/201108.mbox/%3c20110824161640.122D387DD%40minotaur.apache.org%3e - http://www.redhat.com/support/errata/RHSA-2011-1330.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/69396 - http://secunia.com/advisories/46126 - http://www.redhat.com/support/errata/RHSA-2011-1245.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18827 - http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html - http://www.apache.org/dist/httpd/Announcement2
ttp://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html - http://www.apache.org/dist/httpd/Announcement2.2.html - http://marc.info/?l=bugtraq&m=131731002122529&w=2 - http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html - http://secunia.com/advisories/46125 - http://marc.info/?l=bugtraq&m=133477473521382&w=2 - http://www.kb.cert.org/vuls/id/405811 - http://seclists.org/fulldisclosure/2011/Aug/175 - http://marc.info/?l=bugtraq&m=133951357207000&w=2 - http://support.apple.com/kb/HT5002 - http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00008.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14762 - ht
011-11/msg00008.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14762 - http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00010.html - http://marc.info/?l=bugtraq&m=133951357207000&w=2 - http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00009.html - http://www.redhat.com/support/errata/RHSA-2011-1294.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 - http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00011.html - http://marc.info/?l=bugtraq&m=132033751509019&w=2 - http://www.redhat.com/support/errata/RHSA-2011-1300.html - http://marc.info/?l=bugtraq&m=131551295528105&w=2 - http://secu
tp://www.redhat.com/support/errata/RHSA-2011-1300.html - http://marc.info/?l=bugtraq&m=131551295528105&w=2 - http://secunia.com/advisories/45937 - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102
a3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - htt
ists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r688df6f16f141e966a0a47f817e559312b3da27886f59116a94b273d%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re2e23465bbdb17ffe109d21b4f192e6b58221cd7a
c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re2e23465bbdb17ffe109d21b4f192e6b58221cd7aa8797d530b4cd75%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r1d201e3da31a2c8aa870c8314623caef7debd74a13d0f25205e26f15%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thre
l/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2011-3193 State: PUBLISHED Published: 2012-06-16T00:00:00 Last Updated: 2024-08-06T23:29:55.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt before 4.7.4 and Pango, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/46371 - http://git.gnome.org/browse/pango/commit/pango/opentype/harfbuzz-gpos.c?id=a7a715480db66148b1f487528887508a7991dcd0 - http://www.ubuntu.com/usn/USN-1504-1 - http://w
o/opentype/harfbuzz-gpos.c?id=a7a715480db66148b1f487528887508a7991dcd0 - http://www.ubuntu.com/usn/USN-1504-1 - http://www.openwall.com/lists/oss-security/2011/08/24/8 - http://lists.opensuse.org/opensuse-updates/2011-10/msg00007.html - http://secunia.com/advisories/41537 - http://secunia.com/advisories/46410 - http://rhn.redhat.com/errata/RHSA-2011-1327.html - http://rhn.redhat.com/errata/RHSA-2011-1325.html - http://www.openwall.com/lists/oss-security/2011/08/22/6 - http://secunia.com/advisories/46128 - http://rhn.redhat.com/errata/RHSA-2011-1324.html - http://www.openwall.com/lists/oss-security/2011/08/25/1 - http://secunia.com/advisories/49895 - http://secunia.com/advisories/46117 - http
l.com/lists/oss-security/2011/08/25/1 - http://secunia.com/advisories/49895 - http://secunia.com/advisories/46117 - http://rhn.redhat.com/errata/RHSA-2011-1326.html - http://secunia.com/advisories/46119 - http://www.securityfocus.com/bid/49723 - http://cgit.freedesktop.org/harfbuzz/commit/src/harfbuzz-gpos.c?id=da2c52abcd75d46929b34cad55c4fb2c8892bc08 - http://rhn.redhat.com/errata/RHSA-2011-1323.html - https://hermes.opensuse.org/messages/12056605 - http://cgit.freedesktop.org/harfbuzz.old/commit/?id=81c8ef785b079980ad5b46be4fe7c7bf156dbf65 - http://rhn.redhat.com/errata/RHSA-2011-1328.html - https://qt.gitorious.org/qt/qt/commit/9ae6f2f9a57f0c3096d5785913e437953fa6775c - http://www.osvdb.o
HSA-2011-1328.html - https://qt.gitorious.org/qt/qt/commit/9ae6f2f9a57f0c3096d5785913e437953fa6775c - http://www.osvdb.org/75652 - http://secunia.com/advisories/46118 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69991 - http://lists.opensuse.org/opensuse-updates/2011-10/msg00008.html
CVE ID: CVE-2011-3194 State: PUBLISHED Published: 2012-06-16T00:00:00 Last Updated: 2024-08-06T23:29:56.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the TIFF reader in gui/image/qtiffhandler.cpp in Qt 4.7.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the TIFFTAG_SAMPLESPERPIXEL tag in a greyscale TIFF image with multiple samples per pixel. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/46371 - http://www.ubuntu.com/usn/USN-1504-1 - http://secunia.com/advisories/46140 - http://www.openwall.com/lists/oss-security/2011/08/24/8 - http://security.gentoo.or
ttp://secunia.com/advisories/46140 - http://www.openwall.com/lists/oss-security/2011/08/24/8 - http://security.gentoo.org/glsa/glsa-201206-02.xml - http://lists.opensuse.org/opensuse-updates/2011-10/msg00007.html - http://secunia.com/advisories/46410 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69975 - http://www.openwall.com/lists/oss-security/2011/08/22/6 - https://qt.gitorious.org/qt/qt/commit/cb6380beb81ab9571c547270c144988781fed465 - http://secunia.com/advisories/46128 - http://secunia.com/advisories/46187 - http://secunia.com/advisories/49895 - https://bugzilla.novell.com/show_bug.cgi?id=637275 - http://secunia.com/advisories/49383 - http://www.securityfocus.com/bid/49724 - h
lla.novell.com/show_bug.cgi?id=637275 - http://secunia.com/advisories/49383 - http://www.securityfocus.com/bid/49724 - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066209.html - http://rhn.redhat.com/errata/RHSA-2011-1323.html - https://hermes.opensuse.org/messages/12056605 - http://rhn.redhat.com/errata/RHSA-2011-1328.html - http://www.osvdb.org/75653 - http://lists.opensuse.org/opensuse-updates/2011-10/msg00008.html
CVE ID: CVE-2011-3195 State: PUBLISHED Published: 2014-03-20T19:00:00 Last Updated: 2024-08-06T23:29:55.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: shared/inc/sql/lists.php in Domain Technologie Control (DTC) before 0.34.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in mailing list tunable options. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/08/13/1 - http://www.openwall.com/lists/oss-security/2011/08/24/10 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=637477 - http://www.debian.org/security/2011/dsa-2365 - http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=bl
ugreport.cgi?bug=637477 - http://www.debian.org/security/2011/dsa-2365 - http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=blob%3Bf=debian/changelog%3Bhb=3eb6ef5cea6c571aae5e49e1930de778eca280c3
CVE ID: CVE-2011-3196 State: PUBLISHED Published: 2014-03-20T19:00:00 Last Updated: 2024-08-06T23:29:55.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: The setup script in Domain Technologie Control (DTC) before 0.34.1 uses world-readable permissions for /etc/apache2/apache2.conf, which allows local users to obtain the dtcdaemons MySQL password by reading the file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/08/13/1 - http://www.openwall.com/lists/oss-security/2011/08/24/10 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=637485 - http://www.debian.org/security/2011/dsa-2365 - http://git.gplhost.com/gitwe
ebian.org/cgi-bin/bugreport.cgi?bug=637485 - http://www.debian.org/security/2011/dsa-2365 - http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=blob%3Bf=debian/changelog%3Bhb=3eb6ef5cea6c571aae5e49e1930de778eca280c3
CVE ID: CVE-2011-3197 State: PUBLISHED Published: 2014-03-20T19:00:00 Last Updated: 2024-08-06T23:29:55.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Domain Technologie Control (DTC) before 0.34.1 allows remote authenticated users to execute arbitrary SQL commands via the addrlink parameter to shared/inc/forms/domain_info.php. NOTE: CVE-2011-3197 has been SPLIT due to findings by different researchers. CVE-2011-5272 has been assigned for the vps_note parameter to dtcadmin/logPushlet.php vector. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=637487 - http://www.openwall.com/lis
Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=637487 - http://www.openwall.com/lists/oss-security/2011/08/13/1 - http://www.openwall.com/lists/oss-security/2011/08/24/10 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=637498 - http://www.debian.org/security/2011/dsa-2365 - http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=blob%3Bf=debian/changelog%3Bhb=3eb6ef5cea6c571aae5e49e1930de778eca280c3
CVE ID: CVE-2011-3198 State: PUBLISHED Published: 2014-03-20T19:00:00 Last Updated: 2024-08-06T23:29:55.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Domain Technologie Control (DTC) before 0.34.1 includes a password in the -b command line argument to htpasswd, which might allow local users to read the password by listing the process and its arguments. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/08/13/1 - http://www.openwall.com/lists/oss-security/2011/08/24/10 - http://www.debian.org/security/2011/dsa-2365 - http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=blob%3Bf=debian/changelog%3Bhb=3eb6ef5cea6c571aae5e49
urity/2011/dsa-2365 - http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=blob%3Bf=debian/changelog%3Bhb=3eb6ef5cea6c571aae5e49e1930de778eca280c3 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=637537