Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-2195 State: PUBLISHED Published: 2010-08-02T19:00:00 Last Updated: 2024-08-07T02:25:07.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: bozotic HTTP server (aka bozohttpd) 20090522 through 20100512 allows attackers to cause a denial of service via vectors related to a "wrong code generation interaction with GCC." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/60876 - http://security-tracker.debian.org/tracker/CVE-2010-2195 - http://www.eterna.com.au/bozohttpd - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590298 - http://www.eterna.com.au/bozohttpd/CHANGES
CVE ID: CVE-2010-2197 State: PUBLISHED Published: 2010-06-08T18:00:00 Last Updated: 2024-08-07T02:25:06.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: rpmbuild in RPM 4.8.0 and earlier does not properly parse the syntax of spec files, which allows user-assisted remote attackers to remove home directories via vectors involving a ;~ (semicolon tilde) sequence in a Name tag. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/59423 - https://bugzilla.redhat.com/show_bug.cgi?id=125517
CVE ID: CVE-2010-2198 State: PUBLISHED Published: 2010-06-08T18:00:00Z Last Updated: 2024-09-16T23:01:58.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/fsm.c in RPM 4.8.0 and earlier does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade or deletion of the file in an RPM package removal, which might allow local users to gain privileges or bypass intended access restrictions by creating a hard link to a vulnerable file that has (1) POSIX file capabilities or (2) SELinux context information, a related issue to CVE-2010-2059. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advis
elated issue to CVE-2010-2059. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40028 - http://marc.info/?l=oss-security&m=127559059928131&w=2 - http://www.osvdb.org/65144 - http://rpm.org/gitweb?p=rpm.git%3Ba=commit%3Bh=4d172a194addc49851e558ea390d3045894e3230 - https://bugzilla.redhat.com/show_bug.cgi?id=598775 - http://www.openwall.com/lists/oss-security/2010/06/02/3 - http://www.openwall.com/lists/oss-security/2010/06/03/5 - http://www.openwall.com/lists/oss-security/2010/06/04/1
CVE ID: CVE-2010-2199 State: PUBLISHED Published: 2010-06-08T18:00:00 Last Updated: 2024-08-07T02:25:07.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/fsm.c in RPM 4.8.0 and earlier does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade or deletion of the file in an RPM package removal, which might allow local users to bypass intended access restrictions by creating a hard link to a vulnerable file that has a POSIX ACL, a related issue to CVE-2010-2059. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/59416 - https://bugzilla.redhat.com/show_b
Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/59416 - https://bugzilla.redhat.com/show_bug.cgi?id=125517
CVE ID: CVE-2010-2201 State: PUBLISHED Published: 2010-06-30T18:00:00 Last Updated: 2024-08-07T02:25:07.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via a PDF file with crafted Flash content involving the (1) pushstring (0x2C) operator, (2) debugfile (0xF1) operator, and an "invalid pointer vulnerability" that triggers memory corruption, a different vulnerability than CVE-2010-1285 and CVE-2010-2168. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/512098 - http://www.securityfocus.com/bid/
- CVE Program Container: References: - http://www.securityfocus.com/archive/1/512098 - http://www.securityfocus.com/bid/41237 - http://www.vupen.com/english/advisories/2010/1636 - http://www.adobe.com/support/security/bulletins/apsb10-15.html - http://www.securitytracker.com/id?1024159 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6854
CVE ID: CVE-2010-2202 State: PUBLISHED Published: 2010-06-30T18:00:00 Last Updated: 2024-08-07T02:25:07.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-1295, CVE-2010-2207, CVE-2010-2209, CVE-2010-2210, CVE-2010-2211, and CVE-2010-2212. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1636 - http://www.adobe.com/support/security/bulletins/apsb10-15.html - http://www.securityf
com/english/advisories/2010/1636 - http://www.adobe.com/support/security/bulletins/apsb10-15.html - http://www.securityfocus.com/bid/41234 - http://www.securitytracker.com/id?1024159 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7336
CVE ID: CVE-2010-2203 State: PUBLISHED Published: 2010-06-30T18:00:00 Last Updated: 2024-08-07T02:25:07.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 9.x before 9.3.3 on UNIX allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1636 - http://www.adobe.com/support/security/bulletins/apsb10-15.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14495 - http://www.securityfocus.com/bid/41235 - http://www.securitytracker.com/id?1024159
CVE ID: CVE-2010-2204 State: PUBLISHED Published: 2010-06-30T18:00:00 Last Updated: 2024-08-07T02:25:07.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1636 - http://www.adobe.com/support/security/bulletins/apsb10-15.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7242 - http://www.securityfocus.com/bid/412
al.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7242 - http://www.securityfocus.com/bid/41231 - http://www.securitytracker.com/id?1024159
CVE ID: CVE-2010-2205 State: PUBLISHED Published: 2010-06-30T18:00:00 Last Updated: 2024-08-07T02:25:07.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, access uninitialized memory, which allows attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1636 - http://www.adobe.com/support/security/bulletins/apsb10-15.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7070 - http://www.securitytracker.com/id?1024159
CVE ID: CVE-2010-2206 State: PUBLISHED Published: 2010-06-30T18:00:00 Last Updated: 2024-08-07T02:25:07.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in AcroForm.api in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted GIF image in a PDF file, which bypasses a size check and triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1636 - http://www.adobe.com/support/security/bulletins/apsb10-15.html - http://www.securityfocus.com/archive/1/512092/100/0/threaded - h
w.adobe.com/support/security/bulletins/apsb10-15.html - http://www.securityfocus.com/archive/1/512092/100/0/threaded - http://secunia.com/secunia_research/2010-88/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7200 - http://www.securitytracker.com/id?1024159 - http://www.securityfocus.com/bid/41241
CVE ID: CVE-2010-2207 State: PUBLISHED Published: 2010-06-30T18:00:00 Last Updated: 2024-08-07T02:25:07.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-1295, CVE-2010-2202, CVE-2010-2209, CVE-2010-2210, CVE-2010-2211, and CVE-2010-2212. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1636 - http://www.securityfocus.com/bid/41239 - http://www.adobe.com/support/security/bullet
com/english/advisories/2010/1636 - http://www.securityfocus.com/bid/41239 - http://www.adobe.com/support/security/bulletins/apsb10-15.html - http://www.securitytracker.com/id?1024159 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6849
CVE ID: CVE-2010-2208 State: PUBLISHED Published: 2010-06-30T18:00:00 Last Updated: 2024-08-07T02:25:07.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, dereference a heap object after this object's deletion, which allows attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1636 - http://www.adobe.com/support/security/bulletins/apsb10-15.html - http://www.securityfocus.com/bid/41244 - http://www.securitytracker.com/id?1024159 - https://oval.cisecurity.org/repository/search/
securityfocus.com/bid/41244 - http://www.securitytracker.com/id?1024159 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7188
CVE ID: CVE-2010-2209 State: PUBLISHED Published: 2010-06-30T18:00:00 Last Updated: 2024-08-07T02:25:07.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-1295, CVE-2010-2202, CVE-2010-2207, CVE-2010-2210, CVE-2010-2211, and CVE-2010-2212. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1636 - http://www.adobe.com/support/security/bulletins/apsb10-15.html - https://oval.cisecur
com/english/advisories/2010/1636 - http://www.adobe.com/support/security/bulletins/apsb10-15.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6957 - http://www.securityfocus.com/bid/41240 - http://www.securitytracker.com/id?1024159
CVE ID: CVE-2010-2210 State: PUBLISHED Published: 2010-06-30T18:00:00 Last Updated: 2024-08-07T02:25:07.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-1295, CVE-2010-2202, CVE-2010-2207, CVE-2010-2209, CVE-2010-2211, and CVE-2010-2212. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1636 - http://www.adobe.com/support/security/bulletins/apsb10-15.html - http://www.securityt
com/english/advisories/2010/1636 - http://www.adobe.com/support/security/bulletins/apsb10-15.html - http://www.securitytracker.com/id?1024159 - http://www.securityfocus.com/bid/41242 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6929
CVE ID: CVE-2010-2211 State: PUBLISHED Published: 2010-06-30T18:00:00 Last Updated: 2024-08-07T02:25:07.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-1295, CVE-2010-2202, CVE-2010-2207, CVE-2010-2209, CVE-2010-2210, and CVE-2010-2212. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1636 - http://www.adobe.com/support/security/bulletins/apsb10-15.html - http://www.securityt
com/english/advisories/2010/1636 - http://www.adobe.com/support/security/bulletins/apsb10-15.html - http://www.securitytracker.com/id?1024159 - http://www.securityfocus.com/bid/41243 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6930
CVE ID: CVE-2010-2212 State: PUBLISHED Published: 2010-06-30T18:00:00 Last Updated: 2024-08-07T02:25:07.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a PDF file containing Flash content with a crafted #1023 (3FFh) tag, a different vulnerability than CVE-2010-1295, CVE-2010-2202, CVE-2010-2207, CVE-2010-2209, CVE-2010-2210, and CVE-2010-2211. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/512095/100/0/threaded - http:/
lyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/512095/100/0/threaded - http://www.vupen.com/english/advisories/2010/1636 - http://www.adobe.com/support/security/bulletins/apsb10-15.html - http://www.securitytracker.com/id?1024159 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6798
CVE ID: CVE-2010-2213 State: PUBLISHED Published: 2010-08-11T18:00:00 Last Updated: 2024-08-07T02:25:07.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-0209, CVE-2010-2214, and CVE-2010-2216. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0192 - http://support.apple.com/kb/HT4435 - http://marc.info/?l=bugtraq&m=128767780602751&w=2 - http://www.securitytracker.com/id?10246
upport.apple.com/kb/HT4435 - http://marc.info/?l=bugtraq&m=128767780602751&w=2 - http://www.securitytracker.com/id?1024621 - http://secunia.com/advisories/43026 - http://security.gentoo.org/glsa/glsa-201101-09.xml - http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - http://www.securityfocus.com/bid/42364 - http://marc.info/?l=bugtraq&m=128767780602751&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10983 - http://www.adobe.com/support/security/bulletins/apsb10-16.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16020
CVE ID: CVE-2010-2214 State: PUBLISHED Published: 2010-08-11T18:00:00 Last Updated: 2024-08-07T02:25:07.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-0209, CVE-2010-2213, and CVE-2010-2216. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0192 - http://support.apple.com/kb/HT4435 - http://marc.info/?l=bugtraq&m=128767780602751&w=2 - http://www.securitytracker.com/id?10246
upport.apple.com/kb/HT4435 - http://marc.info/?l=bugtraq&m=128767780602751&w=2 - http://www.securitytracker.com/id?1024621 - http://secunia.com/advisories/43026 - http://security.gentoo.org/glsa/glsa-201101-09.xml - http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - http://www.securityfocus.com/bid/42358 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15966 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11971 - http://marc.info/?l=bugtraq&m=128767780602751&w=2 - http://www.adobe.com/support/security/bulletins/apsb10-16.html
CVE ID: CVE-2010-2215 State: PUBLISHED Published: 2010-08-11T18:00:00 Last Updated: 2024-08-07T02:25:07.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to trick a user into (1) selecting a link or (2) completing a dialog, related to a "click-jacking" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0192 - http://support.apple.com/kb/HT4435 - http://marc.info/?l=bugtraq&m=128767780602751&w=2 - http://www.securitytracker.com/id?1024621 - http://secunia.com/advisories/43026 - https://oval.cisecurity.org/rep
&w=2 - http://www.securitytracker.com/id?1024621 - http://secunia.com/advisories/43026 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11532 - http://security.gentoo.org/glsa/glsa-201101-09.xml - http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16192 - http://marc.info/?l=bugtraq&m=128767780602751&w=2 - http://www.adobe.com/support/security/bulletins/apsb10-16.html - http://www.securityfocus.com/bid/42361
CVE ID: CVE-2010-2216 State: PUBLISHED Published: 2010-08-11T18:00:00 Last Updated: 2024-08-07T02:25:07.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-0209, CVE-2010-2213, and CVE-2010-2214. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0192 - http://support.apple.com/kb/HT4435 - http://marc.info/?l=bugtraq&m=128767780602751&w=2 - https://oval.cisecurity.org/repository/
upport.apple.com/kb/HT4435 - http://marc.info/?l=bugtraq&m=128767780602751&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16177 - http://www.securitytracker.com/id?1024621 - http://secunia.com/advisories/43026 - http://security.gentoo.org/glsa/glsa-201101-09.xml - http://www.securityfocus.com/bid/42362 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - http://marc.info/?l=bugtraq&m=128767780602751&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11977 - http://www.adobe.com/support/security/bulletins/apsb10-16.html
CVE ID: CVE-2010-2217 State: PUBLISHED Published: 2010-08-11T18:00:00Z Last Updated: 2024-09-17T01:11:03.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to execute arbitrary code via unspecified vectors, related to a "JS method vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb10-19.html
CVE ID: CVE-2010-2218 State: PUBLISHED Published: 2010-08-11T18:00:00Z Last Updated: 2024-09-17T04:04:25.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to cause a denial of service via unspecified vectors, related to a "JS method issue." Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb10-19.html
CVE ID: CVE-2010-2219 State: PUBLISHED Published: 2010-08-11T18:00:00Z Last Updated: 2024-09-16T16:38:10.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to cause a denial of service (memory consumption) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb10-19.html
CVE ID: CVE-2010-2220 State: PUBLISHED Published: 2010-08-11T18:00:00Z Last Updated: 2024-09-16T21:04:39.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to cause a denial of service via unspecified vectors, related to an "input validation issue." Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb10-19.html
CVE ID: CVE-2010-2221 State: PUBLISHED Published: 2010-07-08T18:00:00 Last Updated: 2024-08-07T02:25:07.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the iSNS implementation in isns.c in (1) Linux SCSI target framework (aka tgt or scsi-target-utils) before 1.0.6, (2) iSCSI Enterprise Target (aka iscsitarget or IET) 1.4.20.1 and earlier, and (3) Generic SCSI Target Subsystem for Linux (aka SCST or iscsi-scst) 1.0.1.1 and earlier allow remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via (a) a long iSCSI Name string in an SCN message or (b) an invalid PDU. Additional Analyst Note
execute arbitrary code via (a) a long iSCSI Name string in an SCN message or (b) an invalid PDU. Additional Analyst Notes: - CVE Program Container: References: - http://scst.svn.sourceforge.net/viewvc/scst?view=revision&revision=1793 - http://archives.neohapsis.com/archives/bugtraq/2010-07/0022.html - http://www.vupen.com/english/advisories/2010/1760 - http://archives.neohapsis.com/archives/fulldisclosure/2010-07/0058.html - http://www.osvdb.org/65992 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:131 - http://www.osvdb.org/65990 - http://www.securityfocus.com/bid/41327 - http://www.redhat.com/support/errata/RHSA-2010-0518.html - http://www.osvdb.org/65991 - http://sourceforge
m/bid/41327 - http://www.redhat.com/support/errata/RHSA-2010-0518.html - http://www.osvdb.org/65991 - http://sourceforge.net/mailarchive/forum.php?thread_name=E2BB8074E5500C42984D980D4BD78EF904075006%40MFG-NYC-EXCH2.mfg.prv&forum_name=iscsitarget-devel - http://secunia.com/advisories/40485 - http://lists.wpkg.org/pipermail/stgt/2010-July/003858.html - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - https://bugzilla.redhat.com/show_bug.cgi?id=593877 - http://secunia.com/advisories/40494 - http://scst.svn.sourceforge.net/viewvc/scst/trunk/iscsi-scst/usr/isns.c?r1=1793&r2=1792&pathrev=1793 - http://www.vupen.com/english/advisories/2010/1786 - http://www.securitytrac
st/usr/isns.c?r1=1793&r2=1792&pathrev=1793 - http://www.vupen.com/english/advisories/2010/1786 - http://www.securitytracker.com/id?1024175 - http://secunia.com/advisories/40495