Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-6522 State: PUBLISHED Published: 2013-01-31T02:00:00 Last Updated: 2024-08-06T21:28:39.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the getContent function in codes/wcms.php in w-CMS 2.01 allows remote attackers to read arbitrary files via a .. (dot dot) in the p parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47527 - http://www.exploit-db.com/exploits/18348 - http://www.osvdb.org/80974 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72302 - http://www.securityfocus.com/bid/51359 - http
b.org/80974 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72302 - http://www.securityfocus.com/bid/51359 - http://www.exploit-db.com/exploits/18711
CVE ID: CVE-2012-6523 State: PUBLISHED Published: 2013-01-31T02:00:00 Last Updated: 2024-08-06T21:28:40.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in w-CMS 2.01 allow remote attackers to inject arbitrary web script or HTML via (1) the p parameter in the getMenus function in codes/wcms.php; or the COMMENT parameter in (2) blog.php, (3) guestbook.php, or (4) forum.php in codes/. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/78268 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72300 - http://secunia.com/adviso
ences: - http://osvdb.org/78268 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72300 - http://secunia.com/advisories/47527 - http://www.exploit-db.com/exploits/18348 - http://osvdb.org/78267 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72301 - http://www.securityfocus.com/bid/51359
CVE ID: CVE-2012-6524 State: PUBLISHED Published: 2013-01-31T02:00:00 Last Updated: 2024-08-06T21:28:39.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in kommentar.php in pGB 2.12 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/78342 - http://www.securityfocus.com/bid/51550 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72450 - http://secunia.com/advisories/47530 - http://www.exploit-db.com/exploits/18383
CVE ID: CVE-2012-6525 State: PUBLISHED Published: 2013-01-31T02:00:00 Last Updated: 2024-08-06T21:28:39.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in members.php in PHPBridges allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/82526 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72451 - http://www.securityfocus.com/bid/51552 - http://www.exploit-db.com/exploits/18384
CVE ID: CVE-2012-6526 State: PUBLISHED Published: 2013-01-31T02:00:00 Last Updated: 2024-08-06T21:28:39.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in show_code.php in Vastal I-Tech Freelance Zone allows remote attackers to execute arbitrary SQL commands via the code_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72455 - http://packetstormsecurity.org/files/108756/vastalfreelance-sql.txt - http://www.securityfocus.com/bid/51533
CVE ID: CVE-2012-6527 State: PUBLISHED Published: 2013-01-31T02:00:00 Last Updated: 2024-08-06T21:28:39.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the My Calendar plugin before 1.10.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/extend/plugins/my-calendar/changelog/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/72454 - http://www.securityfocus.com/bid/51539 - http://secunia.com/advisories/47579 - http://plugins.trac.wordpress.org/changeset/490070/my-calendar
CVE ID: CVE-2012-6528 State: PUBLISHED Published: 2013-01-31T02:00:00 Last Updated: 2024-08-06T21:28:39.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ATutor before 2.1 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) themes/default/tile_search/index.tmpl.php, (2) login.php, (3) search.php, (4) password_reminder.php, (5) login.php/jscripts/infusion, (6) login.php/mods/_standard/flowplayer, (7) browse.php/jscripts/infusion/framework/fss, (8) registration.php/themes/default/ie_styles.css, (9) about.php, or (10) themes/default/social/basic_profile.tmpl.php. Additional Analyst Notes: - C
efault/ie_styles.css, (9) about.php, or (10) themes/default/social/basic_profile.tmpl.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51423 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72412 - http://archives.neohapsis.com/archives/bugtraq/2012-01/0094.html - http://atutor.ca/atutor/change_log.php - http://www.darksecurity.de/advisories/2012/SSCHADV2012-002.txt - http://secunia.com/advisories/47597
CVE ID: CVE-2012-6529 State: PUBLISHED Published: 2013-01-31T02:00:00 Last Updated: 2024-08-06T21:28:39.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Marinet CMS allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) galleryphoto.php or (2) gallery.php; or the roomid parameter to (3) room.php or (4) room2.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51336 - http://packetstormsecurity.org/files/view/108474/marinetcmsroomid-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/72272
CVE ID: CVE-2012-6530 State: PUBLISHED Published: 2013-01-31T02:00:00Z Last Updated: 2024-09-17T01:55:51.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Sysax Multi Server before 5.52, when HTTP is enabled, allows remote authenticated users with the create folder permission to execute arbitrary code via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www.pwnag3.com/2012/01/sysax-multi-server-550-exploit.html - http://www.exploit-db.com/exploits/18382 - http://www.exploit-db.com/exploits/18420 - http://www.securityfocus.com/bid/51548
CVE ID: CVE-2012-6531 State: PUBLISHED Published: 2013-02-13T17:00:00Z Last Updated: 2024-09-16T19:56:53.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: (1) Zend_Dom, (2) Zend_Feed, and (3) Zend_Soap in Zend Framework 1.x before 1.11.13 and 1.12.x before 1.12.0 do not properly handle SimpleXMLElement classes, which allow remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE element in an XML-RPC request, aka an XML external entity (XXE) injection attack, a different vulnerability than CVE-2012-3363. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/06/27/2
Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/06/27/2 - http://www.debian.org/security/2012/dsa-2505 - http://www.openwall.com/lists/oss-security/2012/06/26/4 - http://www.openwall.com/lists/oss-security/2012/06/26/2 - http://framework.zend.com/security/advisory/ZF2012-01 - https://www.sec-consult.com/files/20120626-0_zend_framework_xxe_injection.txt
CVE ID: CVE-2012-6532 State: PUBLISHED Published: 2013-02-13T17:00:00 Last Updated: 2024-08-06T21:28:39.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: (1) Zend_Dom, (2) Zend_Feed, (3) Zend_Soap, and (4) Zend_XmlRpc in Zend Framework 1.x before 1.11.13 and 1.12.x before 1.12.0 allow remote attackers to cause a denial of service (CPU consumption) via recursive or circular references in an XML entity definition in an XML DOCTYPE declaration, aka an XML Entity Expansion (XEE) attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2013:115 - http://framework.zend.com/security/advisory/ZF2012-02
CVE ID: CVE-2012-6533 State: PUBLISHED Published: 2013-02-18T11:00:00Z Last Updated: 2024-09-17T03:22:24.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in pgpwded.sys in Symantec PGP Desktop 10.x and Encryption Desktop 10.3.0 before MP1 on Windows XP and Server 2003 allows local users to gain privileges via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/57835 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2013&suid=20130213_00
CVE ID: CVE-2012-6534 State: PUBLISHED Published: 2013-03-29T10:00:00 Last Updated: 2024-08-06T21:28:39.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Novell Sentinel Log Manager before 1.2.0.3 allows remote attackers to create data retention policies via a crafted text/x-gwt-rpc request to novelllogmanager/datastorageservice.rpc, and allows remote authenticated Report Administrators to create data retention policies via a search-results "Save Query As" "Save As Retention Policy" action. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2012/Oct/25 - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5150
//seclists.org/fulldisclosure/2012/Oct/25 - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5150932.html - https://bugzilla.novell.com/show_bug.cgi?id=771634 - https://www.netiq.com/documentation/novelllogmanager12/readme/data/log_manager1203_readme.html - https://www.exploit-db.com/exploits/21744/
CVE ID: CVE-2012-6535 State: PUBLISHED Published: 2013-12-02T22:00:00 Last Updated: 2024-08-06T21:28:40.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: DjVuLibre before 3.5.25.3, as used in Evince, Sumatra PDF Reader, VuDroid, and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted DjVu (aka .djv) file. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-2844 - http://www.ubuntu.com/usn/USN-2056-1 - http://technet.microsoft.com/security/msvr/msvr13-004
CVE ID: CVE-2012-6536 State: PUBLISHED Published: 2013-03-14T20:00:00Z Last Updated: 2024-09-17T03:27:42.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/xfrm/xfrm_user.c in the Linux kernel before 3.6 does not verify that the actual Netlink message length is consistent with a certain header field, which allows local users to obtain sensitive information from kernel heap memory by leveraging the CAP_NET_ADMIN capability and providing a (1) new or (2) updated state. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/03/05/13 - https://github.com/torvalds/linux/commit/ecd7918745234e423dd87fcc0c077da557909720 - htt
sts/oss-security/2013/03/05/13 - https://github.com/torvalds/linux/commit/ecd7918745234e423dd87fcc0c077da557909720 - https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.6.bz2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ecd7918745234e423dd87fcc0c077da557909720
CVE ID: CVE-2012-6537 State: PUBLISHED Published: 2013-03-14T20:00:00 Last Updated: 2024-08-06T21:28:39.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/xfrm/xfrm_user.c in the Linux kernel before 3.6 does not initialize certain structures, which allows local users to obtain sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f778a636713a435d3a922c60b1622a91136560c1 - http://www.openwall.com/lists/oss-security/2013/03/05/13 - https://github.com/torvalds/linux/commit/7b789836f434c87168eab067cfbed1ec
penwall.com/lists/oss-security/2013/03/05/13 - https://github.com/torvalds/linux/commit/7b789836f434c87168eab067cfbed1ec4783dffd - http://www.ubuntu.com/usn/USN-1792-1 - https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.6.bz2 - http://rhn.redhat.com/errata/RHSA-2013-0744.html - https://github.com/torvalds/linux/commit/1f86840f897717f86d523a13e99a447e6a5d2fa5 - http://www.ubuntu.com/usn/USN-1798-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1f86840f897717f86d523a13e99a447e6a5d2fa5 - https://github.com/torvalds/linux/commit/f778a636713a435d3a922c60b1622a91136560c1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7b789836
a435d3a922c60b1622a91136560c1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7b789836f434c87168eab067cfbed1ec4783dffd
CVE ID: CVE-2012-6538 State: PUBLISHED Published: 2013-03-14T20:00:00 Last Updated: 2024-08-06T21:28:39.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: The copy_to_user_auth function in net/xfrm/xfrm_user.c in the Linux kernel before 3.6 uses an incorrect C library function for copying a string, which allows local users to obtain sensitive information from kernel heap memory by leveraging the CAP_NET_ADMIN capability. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/03/05/13 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4c87308bdea31a7b4828a51f6156e6f721a1fcc9 - https://github.
org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4c87308bdea31a7b4828a51f6156e6f721a1fcc9 - https://github.com/torvalds/linux/commit/4c87308bdea31a7b4828a51f6156e6f721a1fcc9 - https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.6.bz2 - http://rhn.redhat.com/errata/RHSA-2013-0744.html
CVE ID: CVE-2012-6539 State: PUBLISHED Published: 2013-03-14T20:00:00 Last Updated: 2024-08-06T21:28:39.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dev_ifconf function in net/socket.c in the Linux kernel before 3.6 does not initialize a certain structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=43da5f2e0d0c69ded3d51907d9552310a6b545e8 - http://www.openwall.com/lists/oss-security/2013/03/05/13 - https://github.com/torvalds/linux/commit/43da5f2e0d0c69ded3d5190
p://www.openwall.com/lists/oss-security/2013/03/05/13 - https://github.com/torvalds/linux/commit/43da5f2e0d0c69ded3d51907d9552310a6b545e8 - http://www.ubuntu.com/usn/USN-1792-1 - https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.6.bz2 - http://www.ubuntu.com/usn/USN-1798-1
CVE ID: CVE-2012-6540 State: PUBLISHED Published: 2013-03-14T20:00:00 Last Updated: 2024-08-06T21:28:39.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_ip_vs_get_ctl function in net/netfilter/ipvs/ip_vs_ctl.c in the Linux kernel before 3.6 does not initialize a certain structure for IP_VS_SO_GET_TIMEOUT commands, which allows local users to obtain sensitive information from kernel stack memory via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/2d8a041b7bfe1097af21441cb77d6af95f4f4680 - http://www.openwall.com/lists/oss-security/2013/03/05/13 - http://www.ubuntu.com/usn/USN-1792-1 - http:/
d6af95f4f4680 - http://www.openwall.com/lists/oss-security/2013/03/05/13 - http://www.ubuntu.com/usn/USN-1792-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2d8a041b7bfe1097af21441cb77d6af95f4f4680 - https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.6.bz2 - http://www.ubuntu.com/usn/USN-1798-1
CVE ID: CVE-2012-6541 State: PUBLISHED Published: 2013-03-14T20:00:00Z Last Updated: 2024-09-16T19:57:26.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ccid3_hc_tx_getsockopt function in net/dccp/ccids/ccid3.c in the Linux kernel before 3.6 does not initialize a certain structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/7b07f8eb75aa3097cdfd4f6eac3da49db787381d - http://www.openwall.com/lists/oss-security/2013/03/05/13 - https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.6.bz2 - http://git.kernel.o
.com/lists/oss-security/2013/03/05/13 - https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.6.bz2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7b07f8eb75aa3097cdfd4f6eac3da49db787381d
CVE ID: CVE-2012-6542 State: PUBLISHED Published: 2013-03-14T20:00:00 Last Updated: 2024-08-06T21:28:39.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: The llc_ui_getname function in net/llc/af_llc.c in the Linux kernel before 3.6 has an incorrect return value in certain circumstances, which allows local users to obtain sensitive information from kernel stack memory via a crafted application that leverages an uninitialized pointer argument. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/3592aaeb80290bda0f2cf0b5456c97bfc638b192 - http://www.ubuntu.com/usn/USN-1805-1 - http://www.openwall.com/lists/oss-security/2013/03/
bda0f2cf0b5456c97bfc638b192 - http://www.ubuntu.com/usn/USN-1805-1 - http://www.openwall.com/lists/oss-security/2013/03/05/13 - http://www.ubuntu.com/usn/USN-1808-1 - http://rhn.redhat.com/errata/RHSA-2013-1645.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3592aaeb80290bda0f2cf0b5456c97bfc638b192 - https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.6.bz2
CVE ID: CVE-2012-6543 State: PUBLISHED Published: 2013-03-14T20:00:00Z Last Updated: 2024-09-17T01:36:53.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: The l2tp_ip6_getname function in net/l2tp/l2tp_ip6.c in the Linux kernel before 3.6 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel stack memory via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/04d4fbca1017c11381e7d82acea21dd741e748bc - http://www.openwall.com/lists/oss-security/2013/03/05/13 - https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.6.bz2 - http://git.kernel.org
om/lists/oss-security/2013/03/05/13 - https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.6.bz2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=04d4fbca1017c11381e7d82acea21dd741e748bc
CVE ID: CVE-2012-6544 State: PUBLISHED Published: 2013-03-14T20:00:00 Last Updated: 2024-08-06T21:36:00.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth protocol stack in the Linux kernel before 3.6 does not properly initialize certain structures, which allows local users to obtain sensitive information from kernel stack memory via a crafted application that targets the (1) L2CAP or (2) HCI implementation. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1805-1 - http://www.openwall.com/lists/oss-security/2013/03/05/13 - http://www.ubuntu.com/usn/USN-1808-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.
urity/2013/03/05/13 - http://www.ubuntu.com/usn/USN-1808-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=792039c73cf176c8e39a6e8beef2c94ff46522ed - http://rhn.redhat.com/errata/RHSA-2013-1173.html - https://github.com/torvalds/linux/commit/792039c73cf176c8e39a6e8beef2c94ff46522ed - https://github.com/torvalds/linux/commit/e15ca9a0ef9a86f0477530b0f44a725d67f889ee - https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.6.bz2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e15ca9a0ef9a86f0477530b0f44a725d67f889ee - https://github.com/torvalds/linux/commit/3f68ba07b1da811bf383b4b701b129bfcb2e4988 - http://git.kernel.org/?p=linu
89ee - https://github.com/torvalds/linux/commit/3f68ba07b1da811bf383b4b701b129bfcb2e4988 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3f68ba07b1da811bf383b4b701b129bfcb2e4988
CVE ID: CVE-2012-6545 State: PUBLISHED Published: 2013-03-14T20:00:00 Last Updated: 2024-08-06T21:36:00.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth RFCOMM implementation in the Linux kernel before 3.6 does not properly initialize certain structures, which allows local users to obtain sensitive information from kernel memory via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/9344a972961d1a6d2c04d9008b13617bcb6ec2ef - http://www.ubuntu.com/usn/USN-1805-1 - http://www.openwall.com/lists/oss-security/2013/03/05/13 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3
//www.openwall.com/lists/oss-security/2013/03/05/13 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9344a972961d1a6d2c04d9008b13617bcb6ec2ef - http://www.ubuntu.com/usn/USN-1808-1 - http://rhn.redhat.com/errata/RHSA-2013-1645.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9ad2de43f1aee7e7274a4e0d41465489299e344b - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f9432c5ec8b1e9a09b9b0e5569e3c73db8de432a - https://github.com/torvalds/linux/commit/f9432c5ec8b1e9a09b9b0e5569e3c73db8de432a - https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.6.bz2 - https://github.com/torvalds/linux/commit/9
e3c73db8de432a - https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.6.bz2 - https://github.com/torvalds/linux/commit/9ad2de43f1aee7e7274a4e0d41465489299e344b
CVE ID: CVE-2012-6546 State: PUBLISHED Published: 2013-03-14T20:00:00 Last Updated: 2024-08-06T21:36:00.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ATM implementation in the Linux kernel before 3.6 does not initialize certain structures, which allows local users to obtain sensitive information from kernel stack memory via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/e862f1a9b7df4e8196ebec45ac62295138aa3fc2 - https://github.com/torvalds/linux/commit/3c0c5cfdcd4d69ffc4b9c0907cec99039f30a50a - http://www.ubuntu.com/usn/USN-1805-1 - http://www.openwall.com/lists/oss-security/2013/03/05/13
9c0907cec99039f30a50a - http://www.ubuntu.com/usn/USN-1805-1 - http://www.openwall.com/lists/oss-security/2013/03/05/13 - http://www.ubuntu.com/usn/USN-1808-1 - https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.6.bz2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e862f1a9b7df4e8196ebec45ac62295138aa3fc2 - http://rhn.redhat.com/errata/RHSA-2013-0744.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3c0c5cfdcd4d69ffc4b9c0907cec99039f30a50a
CVE ID: CVE-2012-6547 State: PUBLISHED Published: 2013-03-14T20:00:00 Last Updated: 2024-08-06T21:36:01.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: The __tun_chr_ioctl function in drivers/net/tun.c in the Linux kernel before 3.6 does not initialize a certain structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 - http://www.openwall.com/lists/oss-security/2013/03/05/13 - https://github.com/torvalds/linux/commit/a117dacde0288f3ec60b6e5bcedae8fa37ee0dfc - https://www.kernel.org/pub/