Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
a=commit%3Bh=0fbedaf5fd7a771d0885c6b7385d934fc90d0d7f - http://secunia.com/advisories/45139 - http://www.exploit-db.com/exploits/17514/ - http://www.debian.org/security/2011/dsa-2286 - http://www.securityfocus.com/archive/1/518804/100/0/threaded - http://www.osvdb.org/73612 - http://www.openwall.com/lists/oss-security/2011/06/29/11 - http://ha.xxor.se/2011/07/phpmyadmin-3x-multiple-remote-code.html - http://secunia.com/advisories/45315 - http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062719.html
CVE ID: CVE-2011-2507 State: PUBLISHED Published: 2011-07-14T23:00:00 Last Updated: 2024-08-06T23:00:34.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: libraries/server_synchronize.lib.php in the Synchronize implementation in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 does not properly quote regular expressions, which allows remote authenticated users to inject a PCRE e (aka PREG_REPLACE_EVAL) modifier, and consequently execute arbitrary PHP code, by leveraging the ability to modify the SESSION superglobal array. Additional Analyst Notes: - CVE Program Container: References: - http://www.xxor.se/advisories/phpMyAdmin_3.x_Multiple_Remote_Code_Executions.txt - http
Program Container: References: - http://www.xxor.se/advisories/phpMyAdmin_3.x_Multiple_Remote_Code_Executions.txt - http://www.openwall.com/lists/oss-security/2011/06/28/2 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2011-008/ - http://secunia.com/advisories/45292 - http://www.openwall.com/lists/oss-security/2011/06/28/6 - http://www.phpmyadmin.net/home_page/security/PMASA-2011-7.php - http://www.openwall.com/lists/oss-security/2011/06/28/8 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:124 - http://securityreason.com/securityalert/8306 - http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=69fb0f8e7dc38075427aceaf09bcac6
p://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=69fb0f8e7dc38075427aceaf09bcac697d0590ff - http://secunia.com/advisories/45139 - http://ha.xxor.se/2011/07/phpmyadmin-3x-pregreplace-rce-poc.html - http://www.debian.org/security/2011/dsa-2286 - http://0x6a616d6573.blogspot.com/2011/07/phpmyadmin-fud.html - http://www.securityfocus.com/archive/1/518804/100/0/threaded - http://www.openwall.com/lists/oss-security/2011/06/29/11 - http://www.osvdb.org/73613 - http://ha.xxor.se/2011/07/phpmyadmin-3x-multiple-remote-code.html - http://secunia.com/advisories/45315 - http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062719.html
CVE ID: CVE-2011-2508 State: PUBLISHED Published: 2011-07-14T23:00:00 Last Updated: 2024-08-06T23:00:34.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in libraries/display_tbl.lib.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1, when a certain MIME transformation feature is enabled, allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in a GLOBALS[mime_map][$meta->name][transformation] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.xxor.se/advisories/phpMyAdmin_3.x_Multiple_Remote_Code_Executions.txt - http://www.openwall.com/lists/oss-securit
://www.xxor.se/advisories/phpMyAdmin_3.x_Multiple_Remote_Code_Executions.txt - http://www.openwall.com/lists/oss-security/2011/06/28/2 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2011-008/ - http://www.phpmyadmin.net/home_page/security/PMASA-2011-8.php - http://secunia.com/advisories/45292 - http://www.openwall.com/lists/oss-security/2011/06/28/6 - http://www.openwall.com/lists/oss-security/2011/06/28/8 - http://www.osvdb.org/73614 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:124 - http://securityreason.com/securityalert/8306 - http://secunia.com/advisories/45139 - http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=b
nia.com/advisories/45139 - http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=b434320eff8ca9c2fc1b043c1804f868341af9a7 - http://www.debian.org/security/2011/dsa-2286 - http://www.securityfocus.com/archive/1/518804/100/0/threaded - http://www.openwall.com/lists/oss-security/2011/06/29/11 - http://ha.xxor.se/2011/07/phpmyadmin-3x-multiple-remote-code.html - http://secunia.com/advisories/45315 - http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062719.html
CVE ID: CVE-2011-2509 State: PUBLISHED Published: 2011-07-27T20:00:00Z Last Updated: 2024-09-16T20:31:40.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.6.4 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to the com_contact component, as demonstrated by the Itemid parameter to index.php; (2) the query string to the com_content component, as demonstrated by the filter_order parameter to index.php; (3) the query string to the com_newsfeeds component, as demonstrated by an arbitrary parameter to index.php; or (4) the option parameter in a reset.request action to index.p
as demonstrated by an arbitrary parameter to index.php; or (4) the option parameter in a reset.request action to index.php; and, when Internet Explorer or Konqueror is used, (5) allow remote attackers to inject arbitrary web script or HTML via the searchword parameter in a search action to index.php in the com_search component. Additional Analyst Notes: - CVE Program Container: References: - http://yehg.net/lab/pr0js/advisories/joomla/core/%5Bjoomla_1.6.3%5D_cross_site_scripting%28XSS%29 - http://www.openwall.com/lists/oss-security/2011/06/28/4 - http://developer.joomla.org/security/news/352-20110604-xss-vulnerability.html - http://www.openwall.com/lists/oss-security/2011/06/29/12
CVE ID: CVE-2011-2510 State: PUBLISHED Published: 2011-07-14T23:00:00 Last Updated: 2024-08-06T23:00:34.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the RSS embedding feature in DokuWiki before 2011-05-25a Rincewind allows remote attackers to inject arbitrary web script or HTML via a link. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/48364 - http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062389.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/68122 - http://secunia.com/advisories/45009 - http://security.gentoo.org/glsa/glsa-201301-07.xml - http:/
ulnerabilities/68122 - http://secunia.com/advisories/45009 - http://security.gentoo.org/glsa/glsa-201301-07.xml - http://www.dokuwiki.org/changes - http://www.openwall.com/lists/oss-security/2011/06/29/13 - http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062380.html - https://bugzilla.redhat.com/show_bug.cgi?id=717146 - http://www.certa.ssi.gouv.fr/site/CERTA-2011-AVI-366/CERTA-2011-AVI-366.html - http://www.debian.org/security/2011/dsa-2320 - http://www.freelists.org/post/dokuwiki/Hotfix-Release-20110525a-Rincewind - http://www.openwall.com/lists/oss-security/2011/06/28/5 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631818 - http://secunia.com/advisories/45190
CVE ID: CVE-2011-2511 State: PUBLISHED Published: 2011-08-10T20:00:00 Last Updated: 2024-08-06T23:00:34.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in libvirt before 0.9.3 allows remote authenticated users to cause a denial of service (libvirtd crash) and possibly execute arbitrary code via a crafted VirDomainGetVcpus RPC call that triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://libvirt.org/news.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/68271 - http://secunia.com/advisories/45441 - http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062515.html - http://secunia.com/advis
ories/45441 - http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062515.html - http://secunia.com/advisories/45446 - http://www.openwall.com/lists/oss-security/2011/06/28/9 - http://www.redhat.com/support/errata/RHSA-2011-1197.html - http://www.redhat.com/support/errata/RHSA-2011-1019.html - http://www.ubuntu.com/usn/USN-1180-1 - http://secunia.com/advisories/45375 - https://www.redhat.com/archives/libvir-list/2011-June/msg01278.html - http://www.securitytracker.com/id?1025822 - http://www.debian.org/security/2011/dsa-2280 - https://hermes.opensuse.org/messages/10027908 - http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062855.html
CVE ID: CVE-2011-2512 State: PUBLISHED Published: 2012-06-21T15:00:00 Last Updated: 2024-08-06T23:00:34.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: The virtio_queue_notify in qemu-kvm 0.14.0 and earlier does not properly validate the virtqueue number, which allows guest users to cause a denial of service (guest crash) and possibly execute arbitrary code via a negative number in the Queue Notify field of the Virtio Header, which bypasses a signed comparison. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2011-0919.html - http://secunia.com/advisories/45170 - http://www.openwall.com/lists/oss-security/2011/06/28/13 - http:
-2011-0919.html - http://secunia.com/advisories/45170 - http://www.openwall.com/lists/oss-security/2011/06/28/13 - http://secunia.com/advisories/44648 - http://www.openwall.com/lists/oss-security/2011/06/29/15 - http://secunia.com/advisories/45301 - http://secunia.com/advisories/45158 - http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00007.html - http://www.osvdb.org/74751 - http://secunia.com/advisories/44458 - http://ubuntu.com/usn/usn-1165-1 - https://www.debian.org/security/2011/dsa-2270 - https://hermes.opensuse.org/messages/9605323 - http://git.kernel.org/?p=virt/kvm/qemu-kvm.git%3Ba=commitdiff%3Bh=7157e2e23e89adcd436caeab31fdd6b47eded377
CVE ID: CVE-2011-2513 State: PUBLISHED Published: 2014-05-14T00:00:00 Last Updated: 2024-08-06T23:00:34.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.1 and before 1.0.4, allows remote attackers to obtain the username and full path of the home and cache directories by accessing properties of the ClassLoader. Additional Analyst Notes: - CVE Program Container: References: - http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2011-July/015171.html - http://icedtea.classpath.org/hg/release/icedtea-web-1.0/rev/b29fdd0f4d04 - http://ubuntu.c
g-dev/2011-July/015171.html - http://icedtea.classpath.org/hg/release/icedtea-web-1.0/rev/b29fdd0f4d04 - http://ubuntu.com/usn/usn-1178-1 - http://rhn.redhat.com/errata/RHSA-2011-1100.html - http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2011-July/015170.html - http://icedtea.classpath.org/hg/release/icedtea-web-1.1/rev/c7ce6c0e6227 - http://securitytracker.com/id?1025854 - https://bugzilla.redhat.com/show_bug.cgi?id=718164
CVE ID: CVE-2011-2514 State: PUBLISHED Published: 2014-05-14T00:00:00 Last Updated: 2024-08-06T23:00:34.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.1 and before 1.0.4, allows remote attackers to trick victims into granting access to local files by modifying the content of the Java Web Start Security Warning dialog box to represent a different filename than the file for which access will be granted. Additional Analyst Notes: - CVE Program Container: References: - http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2011-July/015171.ht
Notes: - CVE Program Container: References: - http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2011-July/015171.html - http://ubuntu.com/usn/usn-1178-1 - http://rhn.redhat.com/errata/RHSA-2011-1100.html - http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2011-July/015170.html - http://icedtea.classpath.org/hg/release/icedtea-web-1.0/rev/b99f9a9769e0 - http://icedtea.classpath.org/hg/release/icedtea-web-1.1/rev/512de5d90388 - https://bugzilla.redhat.com/show_bug.cgi?id=718170 - http://securitytracker.com/id?1025854
CVE ID: CVE-2011-2515 State: PUBLISHED Published: 2019-11-27T20:18:50 Last Updated: 2024-08-06T23:00:34.249Z Vendors: packagekit Products: packagekit Problem Types: installs unsigned RPM packages as though they were signed Description: PackageKit 0.6.17 allows installation of unsigned RPM packages as though they were signed which may allow installation of non-trusted packages and execution of arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-2515 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2515 - https://access.redhat.com/security/cve/cve-2011-2515 - https://www.securityfocus.com/bid/48557/info
CVE ID: CVE-2011-2516 State: PUBLISHED Published: 2011-07-11T20:00:00 Last Updated: 2024-08-06T23:00:34.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the XML signature feature in Apache XML Security for C++ 1.6.0, as used in Shibboleth before 2.4.3 and possibly other products, allows remote attackers to cause a denial of service (crash) via a signature using a large RSA key, which triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2011/dsa-2277 - http://secunia.com/advisories/45491 - http://secunia.com/advisories/45151 - http://www.securityfocus.com/archive/1/518756/100/0/threaded -
/advisories/45491 - http://secunia.com/advisories/45151 - http://www.securityfocus.com/archive/1/518756/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/68420 - https://issues.apache.org/jira/browse/SANTUARIO-271 - http://santuario.apache.org/secadv/CVE-2011-2516.txt - http://lists.fedoraproject.org/pipermail/package-announce/2011-July/063159.html - http://secunia.com/advisories/45198 - http://secunia.com/advisories/45191 - http://shibboleth.internet2.edu/secadv/secadv_20110706.txt - http://www.securitytracker.com/id?1025755 - http://lists.fedoraproject.org/pipermail/package-announce/2011-July/063229.html - http://www.securityfocus.com/bid/48611 - https://lists.apache.or
.org/pipermail/package-announce/2011-July/063229.html - http://www.securityfocus.com/bid/48611 - https://lists.apache.org/thread.html/680e6938b6412e26d5446054fd31de2011d33af11786b989127d1cc3%40%3Ccommits.santuario.apache.org%3E - https://lists.apache.org/thread.html/r1c07a561426ec5579073046ad7f4207cdcef452bb3100abaf908e0cd%40%3Ccommits.santuario.apache.org%3E
CVE ID: CVE-2011-2517 State: PUBLISHED Published: 2012-05-24T23:00:00 Last Updated: 2024-08-06T23:00:34.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in net/wireless/nl80211.c in the Linux kernel before 2.6.39.2 allow local users to gain privileges by leveraging the CAP_NET_ADMIN capability during scan operations with a long SSID value. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2011-1212.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=208c72f4fe44fe09577e7975ba0e7fa0278f3d03 - https://github.com/torvalds/linux/commit/208c72f4fe44fe09577e7975ba0e7fa0278f3
08c72f4fe44fe09577e7975ba0e7fa0278f3d03 - https://github.com/torvalds/linux/commit/208c72f4fe44fe09577e7975ba0e7fa0278f3d03 - http://www.openwall.com/lists/oss-security/2011/07/01/4 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39.2 - https://bugzilla.redhat.com/show_bug.cgi?id=718152
CVE ID: CVE-2011-2518 State: PUBLISHED Published: 2012-05-24T23:00:00 Last Updated: 2024-08-06T23:00:34.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tomoyo_mount_acl function in security/tomoyo/mount.c in the Linux kernel before 2.6.39.2 calls the kern_path function with arguments taken directly from a mount system call, which allows local users to cause a denial of service (OOPS) or possibly have unspecified other impact via a NULL value for the device name. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/07/01/5 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4e78c724d4
s/oss-security/2011/07/01/5 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4e78c724d47e2342aa8fde61f6b8536f662f795f - https://github.com/torvalds/linux/commit/4e78c724d47e2342aa8fde61f6b8536f662f795f - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39.2 - http://marc.info/?l=bugtraq&m=139447903326211&w=2
CVE ID: CVE-2011-2519 State: PUBLISHED Published: 2013-12-27T01:00:00 Last Updated: 2024-08-06T23:00:34.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen in the Linux kernel, when running a guest on a host without hardware assisted paging (HAP), allows guest users to cause a denial of service (invalid pointer dereference and hypervisor crash) via the SAHF instruction. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/08/30/1 - http://rhn.redhat.com/errata/RHSA-2011-1212.html - https://bugzilla.redhat.com/show_bug.cgi?id=718882 - http://xenbits.xen.org/hg/xen-3.1-testing.hg/rev/15644
CVE ID: CVE-2011-2520 State: PUBLISHED Published: 2011-07-21T23:00:00 Last Updated: 2024-08-06T23:00:34.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: fw_dbus.py in system-config-firewall 1.2.29 and earlier uses the pickle Python module unsafely during D-Bus communication between the GUI and the backend, which might allow local users to gain privileges via a crafted serialized object. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063314.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/68734 - http://www.openwall.com/lists/oss-security/2011/07/18/6 - https://bugzilla.redhat.com
mcloud.com/vulnerabilities/68734 - http://www.openwall.com/lists/oss-security/2011/07/18/6 - https://bugzilla.redhat.com/show_bug.cgi?id=717985 - http://www.redhat.com/support/errata/RHSA-2011-0953.html - http://www.securityfocus.com/bid/48715 - http://securitytracker.com/id?1025793 - http://secunia.com/advisories/45294
CVE ID: CVE-2011-2521 State: PUBLISHED Published: 2012-05-24T23:00:00Z Last Updated: 2024-08-06T23:00:34.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: The x86_assign_hw_event function in arch/x86/kernel/cpu/perf_event.c in the Performance Events subsystem in the Linux kernel before 2.6.39 does not properly calculate counter values, which allows local users to cause a denial of service (panic) via the perf program. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/fc66c5210ec2539e800e87d7b3a985323c7be96e - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fc66c5210ec2539e800e87d7b3a985323c7
6e - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fc66c5210ec2539e800e87d7b3a985323c7be96e - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39 - http://www.openwall.com/lists/oss-security/2011/07/06/4 - https://bugzilla.redhat.com/show_bug.cgi?id=719228
CVE ID: CVE-2011-2522 State: PUBLISHED Published: 2011-07-29T20:00:00 Last Updated: 2024-08-06T23:00:34.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that (1) shut down daemons, (2) start daemons, (3) add shares, (4) remove shares, (5) add printers, (6) remove printers, (7) add user accounts, or (8) remove user accounts, as demonstrated by certain start, stop, and restart parameters to the status program. Additional Analyst Notes: - CVE Program Container: Reference
start, stop, and restart parameters to the status program. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:121 - http://osvdb.org/74071 - http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c03008543 - http://marc.info/?l=bugtraq&m=133527864025056&w=2 - http://marc.info/?l=bugtraq&m=133527864025056&w=2 - http://securitytracker.com/id?1025852 - https://bugzilla.samba.org/show_bug.cgi?id=8290 - http://www.debian.org/security/2011/dsa-2290 - http://www.samba.org/samba/security/CVE-2011-2522 - http://secunia.com/advisories/45393 - http://secunia.com/advisories/45496 - http://secunia.com/advisories/45488 - htt
- http://secunia.com/advisories/45393 - http://secunia.com/advisories/45496 - http://secunia.com/advisories/45488 - https://bugzilla.redhat.com/show_bug.cgi?id=721348 - http://samba.org/samba/history/samba-3.5.10.html - http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c03008543 - http://www.exploit-db.com/exploits/17577 - http://securityreason.com/securityalert/8317 - http://jvn.jp/en/jp/JVN29529126/index.html - http://ubuntu.com/usn/usn-1182-1 - http://www.securityfocus.com/bid/48899 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68843
CVE ID: CVE-2011-2523 State: PUBLISHED Published: 2019-11-27T20:36:53 Last Updated: 2024-08-06T23:00:34.246Z Vendors: vsftpd Products: vsftpd Problem Types: UNKNOWN_TYPE Description: vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-2523 - https://access.redhat.com/security/cve/cve-2011-2523 - https://www.openwall.com/lists/oss-security/2011/07/11/5 - https://vigilance.fr/vulnerability/vsftpd-backdoor-in-version-2-3-4-10805 - https://packetstormsecurity.com/files/102745/VSFTPD-2.3.4-Backdoor-Command-Execution.html
door-in-version-2-3-4-10805 - https://packetstormsecurity.com/files/102745/VSFTPD-2.3.4-Backdoor-Command-Execution.html - http://packetstormsecurity.com/files/162145/vsftpd-2.3.4-Backdoor-Command-Execution.html
CVE ID: CVE-2011-2524 State: PUBLISHED Published: 2011-08-31T23:00:00 Last Updated: 2024-08-06T23:00:34.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in soup-uri.c in SoupServer in libsoup before 2.35.4 allows remote attackers to read arbitrary files via a %2e%2e (encoded dot dot) in a URI. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47299 - http://git.gnome.org/browse/libsoup/tree/NEWS - http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063431.html - http://www.redhat.com/support/errata/RHSA-2011-1102.html - http://www.securitytracker.com/id?1025864 - http://www.debian.
ttp://www.redhat.com/support/errata/RHSA-2011-1102.html - http://www.securitytracker.com/id?1025864 - http://www.debian.org/security/2011/dsa-2369 - https://bugzilla.gnome.org/show_bug.cgi?id=653258 - http://www.ubuntu.com/usn/USN-1181-1
CVE ID: CVE-2011-2525 State: PUBLISHED Published: 2012-02-02T02:00:00 Last Updated: 2024-08-06T23:00:34.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: The qdisc_notify function in net/sched/sch_api.c in the Linux kernel before 2.6.35 does not prevent tc_fill_qdisc function calls referencing builtin (aka CQ_F_BUILTIN) Qdisc structures, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a crafted call. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=720552 - http://rhn.redhat.com/errata/RHSA-2011-1065.html - http://kerneltrap.org/mai