Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-1546 State: PUBLISHED Published: 2011-04-01T21:00:00 Last Updated: 2024-08-06T22:28:41.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Andy's PHP Knowledgebase (Aphpkb) before 0.95.3 allow remote attackers to execute arbitrary SQL commands via the s parameter to (1) a_viewusers.php or (2) keysearch.php; and allow remote authenticated administrators to execute arbitrary SQL commands via the (3) id or (4) start parameter to pending.php, or the (5) aid parameter to a_authordetails.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - h
se details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/17084/ - http://aphpkb.blogspot.com/2011/03/this-release-includes-security-fixes.html - http://www.vupen.com/english/advisories/2011/0802 - http://securityreason.com/securityalert/8168 - http://secunia.com/advisories/34476 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66500 - http://securityreason.com/securityalert/8172 - http://www.securityfocus.com/bid/47097 - http://www.uncompiled.com/2011/03/cve-2011-1546/ - http://www.securityfocus.com/archive/1/517261/100/0/threaded
CVE ID: CVE-2011-1547 State: PUBLISHED Published: 2011-05-09T19:00:00 Last Updated: 2024-08-06T22:28:41.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack consumption vulnerabilities in the kernel in NetBSD 4.0, 5.0 before 5.0.3, and 5.1 before 5.1.1, when IPsec is enabled, allow remote attackers to cause a denial of service (memory corruption and panic) or possibly have unspecified other impact via a crafted (1) IPv4 or (2) IPv6 packet with nested IPComp headers. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/668220 - http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2011-004.txt.asc - http://lists.grok
.org/vuls/id/668220 - http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2011-004.txt.asc - http://lists.grok.org.uk/pipermail/full-disclosure/2011-April/080031.html
CVE ID: CVE-2011-1548 State: PUBLISHED Published: 2011-03-30T22:00:00 Last Updated: 2024-08-06T22:28:41.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of logrotate on Debian GNU/Linux uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories, as demonstrated by /var/log/postgresql/. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/03/04/19 - http://openwall.com/lists/oss-security/2011/03/04/16 - http://openwall.com/lists/oss-secu
s/oss-security/2011/03/04/19 - http://openwall.com/lists/oss-security/2011/03/04/16 - http://openwall.com/lists/oss-security/2011/03/04/25 - http://openwall.com/lists/oss-security/2011/03/04/30 - http://openwall.com/lists/oss-security/2011/03/04/26 - http://openwall.com/lists/oss-security/2011/03/10/3 - http://openwall.com/lists/oss-security/2011/03/04/28 - http://openwall.com/lists/oss-security/2011/03/08/5 - http://openwall.com/lists/oss-security/2011/03/07/5 - http://openwall.com/lists/oss-security/2011/03/04/31 - http://openwall.com/lists/oss-security/2011/03/04/17 - http://openwall.com/lists/oss-security/2011/03/10/6 - http://openwall.com/lists/oss-security/2011/03/06/3 - http://openwal
tp://openwall.com/lists/oss-security/2011/03/10/6 - http://openwall.com/lists/oss-security/2011/03/06/3 - http://openwall.com/lists/oss-security/2011/03/04/29 - http://openwall.com/lists/oss-security/2011/03/07/6 - http://openwall.com/lists/oss-security/2011/03/05/6 - http://openwall.com/lists/oss-security/2011/03/05/4 - http://openwall.com/lists/oss-security/2011/03/07/11 - http://openwall.com/lists/oss-security/2011/03/23/11 - http://openwall.com/lists/oss-security/2011/03/06/5 - http://openwall.com/lists/oss-security/2011/03/04/18 - http://openwall.com/lists/oss-security/2011/03/10/2 - http://www.securityfocus.com/bid/47167 - http://openwall.com/lists/oss-security/2011/03/11/3 - http://op
/2011/03/10/2 - http://www.securityfocus.com/bid/47167 - http://openwall.com/lists/oss-security/2011/03/11/3 - http://openwall.com/lists/oss-security/2011/03/10/7 - http://openwall.com/lists/oss-security/2011/03/05/8 - http://openwall.com/lists/oss-security/2011/03/04/22 - http://openwall.com/lists/oss-security/2011/03/11/5 - http://openwall.com/lists/oss-security/2011/03/04/27 - http://openwall.com/lists/oss-security/2011/03/04/32 - http://openwall.com/lists/oss-security/2011/03/14/26 - http://openwall.com/lists/oss-security/2011/03/04/24 - http://openwall.com/lists/oss-security/2011/03/06/4 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=606544 - http://openwall.com/lists/oss-security/2
curity/2011/03/06/4 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=606544 - http://openwall.com/lists/oss-security/2011/03/06/6 - http://openwall.com/lists/oss-security/2011/03/04/33
CVE ID: CVE-2011-1549 State: PUBLISHED Published: 2011-03-30T22:00:00 Last Updated: 2024-08-06T22:28:41.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of logrotate on Gentoo Linux uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories, as demonstrated by directories under /var/log/ for packages. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/03/04/19 - http://openwall.com/lists/oss-security/2011/03/04/16 - http://openwall.co
penwall.com/lists/oss-security/2011/03/04/19 - http://openwall.com/lists/oss-security/2011/03/04/16 - http://openwall.com/lists/oss-security/2011/03/04/25 - http://openwall.com/lists/oss-security/2011/03/04/30 - http://openwall.com/lists/oss-security/2011/03/04/26 - http://openwall.com/lists/oss-security/2011/03/10/3 - http://openwall.com/lists/oss-security/2011/03/04/28 - http://openwall.com/lists/oss-security/2011/03/08/5 - http://openwall.com/lists/oss-security/2011/03/07/5 - http://openwall.com/lists/oss-security/2011/03/04/31 - http://www.securityfocus.com/bid/47170 - http://openwall.com/lists/oss-security/2011/03/04/17 - http://openwall.com/lists/oss-security/2011/03/10/6 - http://open
http://openwall.com/lists/oss-security/2011/03/04/17 - http://openwall.com/lists/oss-security/2011/03/10/6 - http://openwall.com/lists/oss-security/2011/03/06/3 - http://openwall.com/lists/oss-security/2011/03/04/29 - http://openwall.com/lists/oss-security/2011/03/07/6 - http://openwall.com/lists/oss-security/2011/03/05/6 - http://openwall.com/lists/oss-security/2011/03/05/4 - http://openwall.com/lists/oss-security/2011/03/07/11 - http://openwall.com/lists/oss-security/2011/03/23/11 - http://openwall.com/lists/oss-security/2011/03/06/5 - http://openwall.com/lists/oss-security/2011/03/04/18 - http://openwall.com/lists/oss-security/2011/03/10/2 - http://openwall.com/lists/oss-security/2011/03/
ty/2011/03/04/18 - http://openwall.com/lists/oss-security/2011/03/10/2 - http://openwall.com/lists/oss-security/2011/03/11/3 - http://openwall.com/lists/oss-security/2011/03/10/7 - http://openwall.com/lists/oss-security/2011/03/05/8 - http://openwall.com/lists/oss-security/2011/03/04/22 - http://openwall.com/lists/oss-security/2011/03/11/5 - http://openwall.com/lists/oss-security/2011/03/04/27 - http://openwall.com/lists/oss-security/2011/03/04/32 - http://openwall.com/lists/oss-security/2011/03/14/26 - http://openwall.com/lists/oss-security/2011/03/04/24 - http://openwall.com/lists/oss-security/2011/03/06/4 - http://openwall.com/lists/oss-security/2011/03/06/6 - http://openwall.com/lists/os
com/lists/oss-security/2011/03/06/4 - http://openwall.com/lists/oss-security/2011/03/06/6 - http://openwall.com/lists/oss-security/2011/03/04/33
CVE ID: CVE-2011-1550 State: PUBLISHED Published: 2011-03-30T22:00:00Z Last Updated: 2024-09-16T20:37:56.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of logrotate on SUSE openSUSE Factory uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories, as demonstrated by directories for the (1) cobbler, (2) inn, (3) safte-monitor, and (4) uucp packages. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/03/04/19 - http://openwall.com/l
tes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/03/04/19 - http://openwall.com/lists/oss-security/2011/03/04/16 - http://openwall.com/lists/oss-security/2011/03/04/25 - http://openwall.com/lists/oss-security/2011/03/04/30 - http://openwall.com/lists/oss-security/2011/03/04/26 - http://openwall.com/lists/oss-security/2011/03/10/3 - http://openwall.com/lists/oss-security/2011/03/04/28 - http://openwall.com/lists/oss-security/2011/03/08/5 - http://openwall.com/lists/oss-security/2011/03/07/5 - http://openwall.com/lists/oss-security/2011/03/04/31 - http://openwall.com/lists/oss-security/2011/03/04/17 - http://openwall.com/lists/oss-security/2011/03/10/6 -
03/04/31 - http://openwall.com/lists/oss-security/2011/03/04/17 - http://openwall.com/lists/oss-security/2011/03/10/6 - http://openwall.com/lists/oss-security/2011/03/06/3 - http://openwall.com/lists/oss-security/2011/03/04/29 - http://openwall.com/lists/oss-security/2011/03/07/6 - http://openwall.com/lists/oss-security/2011/03/05/6 - http://openwall.com/lists/oss-security/2011/03/05/4 - http://openwall.com/lists/oss-security/2011/03/07/11 - http://openwall.com/lists/oss-security/2011/03/23/11 - http://openwall.com/lists/oss-security/2011/03/06/5 - http://openwall.com/lists/oss-security/2011/03/04/18 - http://openwall.com/lists/oss-security/2011/03/10/2 - http://openwall.com/lists/oss-securi
/oss-security/2011/03/04/18 - http://openwall.com/lists/oss-security/2011/03/10/2 - http://openwall.com/lists/oss-security/2011/03/11/3 - http://openwall.com/lists/oss-security/2011/03/10/7 - http://openwall.com/lists/oss-security/2011/03/05/8 - http://openwall.com/lists/oss-security/2011/03/04/22 - http://openwall.com/lists/oss-security/2011/03/11/5 - http://openwall.com/lists/oss-security/2011/03/04/27 - http://openwall.com/lists/oss-security/2011/03/04/32 - http://openwall.com/lists/oss-security/2011/03/14/26 - http://openwall.com/lists/oss-security/2011/03/04/24 - http://openwall.com/lists/oss-security/2011/03/06/4 - http://openwall.com/lists/oss-security/2011/03/06/6 - http://openwall.c
//openwall.com/lists/oss-security/2011/03/06/4 - http://openwall.com/lists/oss-security/2011/03/06/6 - http://openwall.com/lists/oss-security/2011/03/04/33
CVE ID: CVE-2011-1551 State: PUBLISHED Published: 2011-03-30T22:00:00 Last Updated: 2024-08-06T22:28:41.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: SUSE openSUSE Factory assigns ownership of the /var/log/cobbler/ directory tree to the web-service user account, which might allow local users to gain privileges by leveraging access to this account during root filesystem operations by the Cobbler daemon. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/03/23/11 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66487
CVE ID: CVE-2011-1552 State: PUBLISHED Published: 2011-03-31T23:00:00 Last Updated: 2024-08-06T22:28:41.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause a denial of service (application crash) via a crafted Type 1 font in a PDF document, a different vulnerability than CVE-2011-0764. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43823 - http://secunia.com/advisories/48985 - http://securityreason.com/securityalert/8171 - http://www.kb.cert.org/vuls/id/MAPG-8ECL8X - http://w
/advisories/48985 - http://securityreason.com/securityalert/8171 - http://www.kb.cert.org/vuls/id/MAPG-8ECL8X - http://www.vupen.com/english/advisories/2011/0728 - http://rhn.redhat.com/errata/RHSA-2012-1201.html - http://www.foolabs.com/xpdf/download.html - http://www.toucan-system.com/advisories/tssa-2011-01.txt - http://www.kb.cert.org/vuls/id/376500 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:144 - https://security.gentoo.org/glsa/201701-57 - http://securitytracker.com/id?1025266 - http://www.securityfocus.com/archive/1/517205/100/0/threaded
CVE ID: CVE-2011-1553 State: PUBLISHED Published: 2011-03-31T23:00:00 Last Updated: 2024-08-06T22:28:41.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory write, a different vulnerability than CVE-2011-0764. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43823 - http://secunia.com/advisories/48985 - http://securityreason.com/securityalert/8171 - http://www.kb.cert
visories/43823 - http://secunia.com/advisories/48985 - http://securityreason.com/securityalert/8171 - http://www.kb.cert.org/vuls/id/MAPG-8ECL8X - http://www.vupen.com/english/advisories/2011/0728 - http://rhn.redhat.com/errata/RHSA-2012-1201.html - http://www.foolabs.com/xpdf/download.html - http://www.toucan-system.com/advisories/tssa-2011-01.txt - http://www.kb.cert.org/vuls/id/376500 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:144 - https://security.gentoo.org/glsa/201701-57 - http://securitytracker.com/id?1025266 - http://www.securityfocus.com/archive/1/517205/100/0/threaded
CVE ID: CVE-2011-1554 State: PUBLISHED Published: 2011-03-31T23:00:00 Last Updated: 2024-08-06T22:28:41.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory read, integer overflow, and invalid pointer dereference, a different vulnerability than CVE-2011-0764. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43823 - http://secunia.com/advisories/48985 - http://securityreason.com/s
r: References: - http://secunia.com/advisories/43823 - http://secunia.com/advisories/48985 - http://securityreason.com/securityalert/8171 - http://www.kb.cert.org/vuls/id/MAPG-8ECL8X - http://www.vupen.com/english/advisories/2011/0728 - http://rhn.redhat.com/errata/RHSA-2012-1201.html - http://www.foolabs.com/xpdf/download.html - http://www.toucan-system.com/advisories/tssa-2011-01.txt - http://www.kb.cert.org/vuls/id/376500 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:144 - https://security.gentoo.org/glsa/201701-57 - http://securitytracker.com/id?1025266 - http://www.securityfocus.com/archive/1/517205/100/0/threaded
CVE ID: CVE-2011-1555 State: PUBLISHED Published: 2011-04-01T21:00:00Z Last Updated: 2024-09-16T18:43:32.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in saa.php in Andy's PHP Knowledgebase (Aphpkb) 0.95.3 and earlier allows remote attackers to execute arbitrary SQL commands via the aid parameter, a different vulnerability than CVE-2011-1546. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://aphpkb.blogspot.com/2011/03/this-release-includes-security-fixes.html - http://www.vupen.com/english/advisories/2011/0802 - http://secunia.com/advisories/34476
CVE ID: CVE-2011-1556 State: PUBLISHED Published: 2011-04-01T21:00:00 Last Updated: 2024-08-06T22:28:41.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in plugins/pdfClasses/pdfgen.php in Andy's PHP Knowledgebase (Aphpkb) 0.95.4 allows remote attackers to execute arbitrary SQL commands via the pdfa parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/71287 - http://www.autosectools.com/Advisories/Andy%27s.PHP.Knowledgebase.Project.0.95.4_SQL.Injection_161.html - http://www.vupen.com/english/advisories/2011/0823 - http://secunia.com/advisories/43879 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66
ish/advisories/2011/0823 - http://secunia.com/advisories/43879 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66386 - http://www.exploit-db.com/exploits/17061/
CVE ID: CVE-2011-1557 State: PUBLISHED Published: 2011-04-01T21:00:00Z Last Updated: 2024-09-17T01:45:59.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ICloudCenter ICJobSite 1.1 allows remote attackers to execute arbitrary SQL commands via the pid parameter to an unspecified component, a different vulnerability than CVE-2011-1546. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/47100
CVE ID: CVE-2011-1558 State: PUBLISHED Published: 2011-04-05T15:00:00Z Last Updated: 2024-09-17T02:10:49.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the IBM Web Interface for Content Management (aka WEBi) 1.0.4 before FP3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-1242. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0834 - http://www.ibm.com/support/docview.wss?uid=swg24029060 - http://www-01.ibm.com/support/docview.wss?uid=swg1IO13663 - http://secunia.com/advisories/43993
CVE ID: CVE-2011-1559 State: PUBLISHED Published: 2011-04-05T15:00:00Z Last Updated: 2024-09-16T20:32:41.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the IBM Web Interface for Content Management (aka WEBi) 1.0.4 before FP3 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IO13806 - http://www.ibm.com/support/docview.wss?uid=swg24029060 - http://secunia.com/advisories/43993
CVE ID: CVE-2011-1560 State: PUBLISHED Published: 2011-04-05T15:00:00 Last Updated: 2024-08-06T22:28:41.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: solid.exe in IBM solidDB before 4.5.181, 6.0.x before 6.0.1067, 6.1.x and 6.3.x before 6.3.47, and 6.5.x before 6.5.0.3 uses a password-hash length specified by the client, which allows remote attackers to bypass authentication via a short length value. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21474552 - http://osvdb.org/71494 - http://secunia.com/advisories/44030 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66455 - http://www.vupen.com/english/adv
nia.com/advisories/44030 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66455 - http://www.vupen.com/english/advisories/2011/0854 - http://www.zerodayinitiative.com/advisories/ZDI-11-115/
CVE ID: CVE-2011-1561 State: PUBLISHED Published: 2011-04-05T15:00:00Z Last Updated: 2024-09-17T01:21:50.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LDAP login feature in bos.rte.security 6.1.6.4 in IBM AIX 6.1, when ldap_auth is enabled in ldap.cfg, allows remote attackers to bypass authentication via a login attempt with an arbitrary password. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1025273 - http://www.vupen.com/english/advisories/2011/0836 - http://aix.software.ibm.com/aix/efixes/security/ldapauth_advisory.asc - http://www-01.ibm.com/support/docview.wss?uid=isg1IZ97416 - http://secunia.com/advisories/43968
CVE ID: CVE-2011-1562 State: PUBLISHED Published: 2011-04-05T15:00:00 Last Updated: 2024-08-06T22:28:41.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ecava IntegraXor HMI before n 3.60 (Build 4032) allows remote attackers to bypass authentication and execute arbitrary SQL statements via unspecified vectors related to a crafted POST request. NOTE: some sources have reported this issue as SQL injection, but this might not be accurate. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/44105 - http://www.us-cert.gov/control_systems/pdf/ICSA-11-082-01.pdf - http://www.integraxor.com/blog/security-issue-20101222-0700-vulnerability-note
/control_systems/pdf/ICSA-11-082-01.pdf - http://www.integraxor.com/blog/security-issue-20101222-0700-vulnerability-note - http://www.securityfocus.com/bid/47019 - http://www.vupen.com/english/advisories/2011/0761 - http://twitter.com/#%21/djrbliss/status/50685527749431296 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66306 - http://www.integraxor.com/blog/security-issue-sql-unauthenticated-vulnerability-note
CVE ID: CVE-2011-1563 State: PUBLISHED Published: 2011-04-05T15:00:00 Last Updated: 2024-08-06T22:28:41.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the HMI application in DATAC RealFlex RealWin 2.1 (Build 6.1.10.10) and earlier allow remote attackers to execute arbitrary code via (1) a long username in an On_FC_CONNECT_FCS_LOGIN packet, and crafted (2) On_FC_CTAGLIST_FCS_CADDTAG, (3) On_FC_CTAGLIST_FCS_CDELTAG, (4) On_FC_CTAGLIST_FCS_ADDTAGMS, (5) On_FC_RFUSER_FCS_LOGIN, (6) unspecified "On_FC_BINFILE_FCS_*FILE", (7) On_FC_CGETTAG_FCS_GETTELEMETRY, (8) On_FC_CGETTAG_FCS_GETCHANNELTELEMETRY, (9) On_FC_CGETTAG_FCS_SETTELEMETRY, (10)
(7) On_FC_CGETTAG_FCS_GETTELEMETRY, (8) On_FC_CGETTAG_FCS_GETCHANNELTELEMETRY, (9) On_FC_CGETTAG_FCS_SETTELEMETRY, (10) On_FC_CGETTAG_FCS_SETCHANNELTELEMETRY, and (11) On_FC_SCRIPT_FCS_STARTPROG packets to port 910. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46937 - http://aluigi.org/adv/realwin_2-adv.txt - http://aluigi.org/adv/realwin_7-adv.txt - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-080-04.pdf - http://www.exploit-db.com/exploits/17025 - http://aluigi.org/adv/realwin_4-adv.txt - http://secunia.com/advisories/43848 - http://www.vupen.com/english/advisories/2011/0742 - http://aluigi.org/adv/realwin_8-adv.txt - http://a
dvisories/43848 - http://www.vupen.com/english/advisories/2011/0742 - http://aluigi.org/adv/realwin_8-adv.txt - http://aluigi.org/adv/realwin_5-adv.txt - http://aluigi.org/adv/realwin_3-adv.txt - http://securityreason.com/securityalert/8176
CVE ID: CVE-2011-1564 State: PUBLISHED Published: 2011-04-05T15:00:00 Last Updated: 2024-08-06T22:28:41.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the HMI application in DATAC RealFlex RealWin 2.1 (Build 6.1.10.10) and earlier allow remote attackers to execute arbitrary code via crafted (1) On_FC_MISC_FCS_MSGBROADCAST and (2) On_FC_MISC_FCS_MSGSEND packets, which trigger a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46937 - http://securityreason.com/securityalert/8177 - http://aluigi.org/adv/realwin_6-adv.txt - http://www.us-cert.gov/control_systems/pdf/ICS-ALE
on.com/securityalert/8177 - http://aluigi.org/adv/realwin_6-adv.txt - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-080-04.pdf - http://www.exploit-db.com/exploits/17025 - http://secunia.com/advisories/43848 - http://www.vupen.com/english/advisories/2011/0742