Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-0286 State: PUBLISHED Published: 2010-02-21T21:00:00 Last Updated: 2024-08-07T00:45:11.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the OpenID Identity Authentication extension in TYPO3 4.3.0 allows remote attackers to bypass authentication and gain access to a backend user account via unknown attack vectors in which both the attacker and victim have an OpenID provider that discards identities during authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/0127 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55609 - http://typo3.org/teams/security/secur
dvisories/2010/0127 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55609 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-001/ - http://secunia.com/advisories/38206 - http://osvdb.org/61680
CVE ID: CVE-2010-0287 State: PUBLISHED Published: 2010-02-15T18:00:00 Last Updated: 2024-08-07T00:45:11.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25b allows remote attackers to list the contents of arbitrary directories via a .. (dot dot) in the ns parameter. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034729.html - http://secunia.com/advisories/38183 - http://security.gentoo.org/glsa/glsa-201301-07.xml - http://www.vupen.com/english/advisories/2010/0150 - http://www.spl
http://security.gentoo.org/glsa/glsa-201301-07.xml - http://www.vupen.com/english/advisories/2010/0150 - http://www.splitbrain.org/blog/2010-01/17-dokuwiki-security - http://www.debian.org/security/2010/dsa-1976 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55660 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034831.html - http://www.securityfocus.com/bid/37821 - http://bugs.splitbrain.org/index.php?do=details&task_id=1847 - http://www.exploit-db.com/exploits/11141
CVE ID: CVE-2010-0288 State: PUBLISHED Published: 2010-02-15T18:00:00 Last Updated: 2024-08-07T00:45:11.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: A typo in the administrator permission check in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25b allows remote attackers to gain privileges and access closed wikis by editing current ACL statements, as demonstrated in the wild in January 2010. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/55661 - http://osvdb.org/61710 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034729.html - http://secunia.com/advi
rg/61710 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034729.html - http://secunia.com/advisories/38183 - http://security.gentoo.org/glsa/glsa-201301-07.xml - http://www.vupen.com/english/advisories/2010/0150 - http://www.splitbrain.org/blog/2010-01/17-dokuwiki-security - http://www.debian.org/security/2010/dsa-1976 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034831.html - http://www.securityfocus.com/bid/37820 - http://bugs.splitbrain.org/index.php?do=details&task_id=1847 - http://www.exploit-db.com/exploits/11141
CVE ID: CVE-2010-0289 State: PUBLISHED Published: 2010-02-15T18:00:00 Last Updated: 2024-08-07T00:45:11.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25c allow remote attackers to hijack the authentication of administrators for requests that modify access control rules, and other unspecified requests, via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.splitbrain.org/index.php?do=details&task_id=1853 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034729.html - http://se
o=details&task_id=1853 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034729.html - http://security.gentoo.org/glsa/glsa-201301-07.xml - http://www.splitbrain.org/blog/2010-01/17-dokuwiki-security - http://freshmeat.net/projects/dokuwiki/tags/security-fix - http://www.debian.org/security/2010/dsa-1976 - http://osvdb.org/61708 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034831.html - http://secunia.com/advisories/38205
CVE ID: CVE-2010-0290 State: PUBLISHED Published: 2010-01-22T21:20:00 Last Updated: 2024-08-07T00:45:11.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains (1) CNAME or (2) DNAME records, which do not have the intended validation before caching, aka Bug 20737. NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-4022. Additional A
ore caching, aka Bug 20737. NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-4022. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=557121 - http://www.vupen.com/english/advisories/2010/0176 - https://rhn.redhat.com/errata/RHSA-2010-0062.html - http://marc.info/?l=oss-security&m=126393609503704&w=2 - https://www.isc.org/advisories/CVE-2009-4022v6 - http://secunia.com/advisories/38240 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6815 - http://www.vupen.com/english/advisories/2010/1352 - http://www.ubuntu.com/usn/USN-888-1 - http://secunia.com/advisories/40086 - http
upen.com/english/advisories/2010/1352 - http://www.ubuntu.com/usn/USN-888-1 - http://secunia.com/advisories/40086 - http://www.vupen.com/english/advisories/2010/0622 - http://secunia.com/advisories/38219 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:021 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8884 - https://bugzilla.redhat.com/show_bug.cgi?id=554851 - http://marc.info/?l=oss-security&m=126399602810086&w=2 - http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0018 - http://www.debian.org/security/2010/dsa-2054 - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html - https://oval.cisecurity.org/repository/search
tp://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7512
CVE ID: CVE-2010-0291 State: PUBLISHED Published: 2010-02-15T18:00:00 Last Updated: 2024-08-07T00:45:11.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel before 2.6.32.4 allows local users to gain privileges or cause a denial of service (panic) by calling the (1) mmap or (2) mremap function, aka the "do_mremap() mess" or "mremap/mmap mess." Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ecc1a8993751de4e82eb18640d631dae1f626bd6 - http://groups.google.co.jp/group/fa.linux.kernel/browse_thread/thread/8bf22336b1082090 - http://git.kernel.org/?p=linux/kernel/git/torvald
le.co.jp/group/fa.linux.kernel/browse_thread/thread/8bf22336b1082090 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0ec62d290912bb4b989be7563851bc364ec73b56 - http://marc.info/?l=oss-security&m=126400443123998&w=2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=05d72faa6d13c9d857478a5d35c85db9adada685 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=54f5de709984bae0d31d823ff03de755f9dcac54 - http://marc.info/?l=oss-security&m=126399980216047&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11824 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeL
g/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11824 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.4 - http://groups.google.com/group/linux.kernel/msg/895f20870532241e - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e77414e0aad6a1b063ba5e5750c582c75327ea6a - http://marc.info/?l=oss-security&m=126396065732697&w=2 - http://marc.info/?l=linux-arch&m=126004438008670&w=2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f106af4e90eadd76cfc0b5325f659619e08fb762 - http://marc.info/?l=oss-security&m=126396609004884&w=2 - http://marc.info/?l=oss-security&m=126395874130875&w=2 - http://marc.info/?l=oss-sec
ss-security&m=126396609004884&w=2 - http://marc.info/?l=oss-security&m=126395874130875&w=2 - http://marc.info/?l=oss-security&m=126406814304720&w=2 - http://www.debian.org/security/2010/dsa-1996 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2ea1d13f64efdf49319e86c87d9ba38c30902782 - http://secunia.com/advisories/43315 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=aa65607373a4daf2010e8c3867b6317619f3c1a3 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2c6a10161d0b5fc047b5bd81b03693b9af99fab5 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=564b3bffc619dcbd
5bd81b03693b9af99fab5 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=564b3bffc619dcbdd160de597b0547a7017ea010 - http://secunia.com/advisories/39033 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0067bd8a55862ac9dd212bd1c4f6f5bff1ca1301 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bb52d6694002b9d632bb355f64daa045c6293a4e - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=570dcf2c15463842e384eb597a87c1e39bead99b - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9206de95b1ea68357996ec02be5db0638a0de2c1 - http://www.vmware.com/s
inux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9206de95b1ea68357996ec02be5db0638a0de2c1 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - http://marc.info/?l=oss-security&m=126388181420690&w=2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=935874141df839c706cd6cdc438e85eb69d1525e - http://www.securityfocus.com/bid/37906 - http://www.debian.org/security/2010/dsa-2005 - http://www.securityfocus.com/archive/1/516397/100/0/threaded - http://marc.info/?l=oss-security&m=126393370931972&w=2 - https://bugzilla.redhat.com/show_bug.cgi?id=556703 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=097eed103862f9c6a9
w_bug.cgi?id=556703 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=097eed103862f9c6a97f2e415e21d1134017b135 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c4caa778157dbbf04116f0ac2111e389b5cd7a29 - http://secunia.com/advisories/38492 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1a0ef85f84feb13f07b604fcf5b90ef7c2b5c82f - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f8b7256096a20436f6d0926747e3ac3d64c81d24 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8c7b49b3ecd48923eb64ff57e07a1cdb74782970 - http://www.redhat.com/sup
ux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8c7b49b3ecd48923eb64ff57e07a1cdb74782970 - http://www.redhat.com/support/errata/RHSA-2010-0161.html
CVE ID: CVE-2010-0292 State: PUBLISHED Published: 2010-02-08T20:00:00Z Last Updated: 2024-09-16T22:40:55.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: The read_from_cmd_socket function in cmdmon.c in chronyd in Chrony before 1.23.1, and 1.24-pre1, allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by sending a spoofed cmdmon packet that triggers a continuous exchange of NOHOSTACCESS messages between two daemons, a related issue to CVE-2009-3563. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2010/dsa-1992 - http://www.securityfocus.com/bid/38106 - http://chrony.tuxfamily.org/News.html - http:
bian.org/security/2010/dsa-1992 - http://www.securityfocus.com/bid/38106 - http://chrony.tuxfamily.org/News.html - http://secunia.com/advisories/38428 - https://bugzilla.redhat.com/show_bug.cgi?id=555367 - http://git.tuxfamily.org/chrony/chrony.git/?p=gitroot/chrony/chrony.git%3Ba=commit%3Bh=7864c7a70ce00369194e734eb2842ecc5f8db531 - http://secunia.com/advisories/38480
CVE ID: CVE-2010-0293 State: PUBLISHED Published: 2010-02-08T20:00:00Z Last Updated: 2024-09-16T16:48:21.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: The client logging functionality in chronyd in Chrony before 1.23.1 does not restrict the amount of memory used for storage of client information, which allows remote attackers to cause a denial of service (memory consumption) via spoofed (1) NTP or (2) cmdmon packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2010/dsa-1992 - http://www.securityfocus.com/bid/38106 - http://git.tuxfamily.org/chrony/chrony.git/?p=gitroot/chrony/chrony.git%3Ba=commit%3Bh=2f63cf448560fdb96b80d
bid/38106 - http://git.tuxfamily.org/chrony/chrony.git/?p=gitroot/chrony/chrony.git%3Ba=commit%3Bh=2f63cf448560fdb96b80d8488aae6a15b802a753 - http://chrony.tuxfamily.org/News.html - http://secunia.com/advisories/38428 - https://bugzilla.redhat.com/show_bug.cgi?id=555367 - http://secunia.com/advisories/38480
CVE ID: CVE-2010-0294 State: PUBLISHED Published: 2010-02-08T20:00:00Z Last Updated: 2024-09-16T23:40:29.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: chronyd in Chrony before 1.23.1, and possibly 1.24-pre1, generates a syslog message for each unauthorized cmdmon packet, which allows remote attackers to cause a denial of service (disk consumption) via a large number of invalid packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2010/dsa-1992 - http://www.securityfocus.com/bid/38106 - http://chrony.tuxfamily.org/News.html - http://secunia.com/advisories/38428 - http://git.tuxfamily.org/chrony/chrony.git/?p=gitroot/chrony/c
ily.org/News.html - http://secunia.com/advisories/38428 - http://git.tuxfamily.org/chrony/chrony.git/?p=gitroot/chrony/chrony.git%3Ba=commit%3Bh=0b710499f994823bd938fc6895f097eefb9cc59f - https://bugzilla.redhat.com/show_bug.cgi?id=555367 - http://secunia.com/advisories/38480
CVE ID: CVE-2010-0295 State: PUBLISHED Published: 2010-02-03T19:00:00 Last Updated: 2024-08-07T00:45:11.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: lighttpd before 1.4.26, and 1.5.x, allocates a buffer for each read operation that occurs for a request, which allows remote attackers to cause a denial of service (memory consumption) by breaking a request into small pieces that are sent at a slow rate. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38403 - http://redmine.lighttpd.net/projects/lighttpd/repository/revisions/2711 - http://www.vupen.com/english/advisories/2011/0172 - http://secunia.com/advisories/39765 - http://red
ry/revisions/2711 - http://www.vupen.com/english/advisories/2011/0172 - http://secunia.com/advisories/39765 - http://redmine.lighttpd.net/issues/2147 - http://download.lighttpd.net/lighttpd/security/lighttpd_sa_2010_01.txt - http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041307.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/56038 - http://blogs.sun.com/security/entry/cve_2010_0295_vulnerability_in - http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041264.html - http://www.debian.org/security/2010/dsa-1987 - http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00003.html - http://download.lighttpd.net/lighttpd/security/lighttpd-1.4
nsuse.org/opensuse-security-announce/2010-02/msg00003.html - http://download.lighttpd.net/lighttpd/security/lighttpd-1.4.x_fix_slow_request_dos.patch - http://redmine.lighttpd.net/projects/lighttpd/repository/revisions/2710 - http://www.securityfocus.com/bid/38036 - http://download.lighttpd.net/lighttpd/security/lighttpd-1.5_fix_slow_request_dos.patch - http://www.openwall.com/lists/oss-security/2010/02/01/8 - http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041296.html - http://security.gentoo.org/glsa/glsa-201006-17.xml
CVE ID: CVE-2010-0296 State: PUBLISHED Published: 2010-06-01T20:00:00 Last Updated: 2024-08-07T00:45:11.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: The encode_name macro in misc/mntent_r.c in the GNU C Library (aka glibc or libc6) 2.11.1 and earlier, as used by ncpmount and mount.cifs, does not properly handle newline characters in mountpoint names, which allows local users to cause a denial of service (mtab corruption), or possibly modify mount options and gain privileges, via a crafted mount request. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2010:111 - http://security.gentoo.org/glsa/glsa-2010
eferences: - http://www.mandriva.com/security/advisories?name=MDVSA-2010:111 - http://security.gentoo.org/glsa/glsa-201011-01.xml - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - http://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=ab00f4eac8f4932211259ff87be83144f5211540 - http://www.vupen.com/english/advisories/2010/1246 - http://www.redhat.com/support/errata/RHSA-2011-0412.html - http://www.vupen.com/english/advisories/2011/0863 - http://www.ubuntu.com/usn/USN-944-1 - https://bugzilla.redhat.com/show_bug.cgi?id=559579 - http://secunia.com/advisories/39900 - https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html -
9 - http://secunia.com/advisories/39900 - https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html - http://secunia.com/advisories/43830 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://securitytracker.com/id?1024043 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59240 - http://frugalware.org/security/662 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:112 - http://www.debian.org/security/2010/dsa-2058 - http://seclists.org/fulldisclosure/2019/Jun/18 - https://seclists.org/bugtraq/2019/Jun/14 - http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html
CVE ID: CVE-2010-0297 State: PUBLISHED Published: 2010-02-12T19:00:00 Last Updated: 2024-08-07T00:45:11.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the usb_host_handle_control function in the USB passthrough handling implementation in usb-linux.c in QEMU before 0.11.1 allows guest OS users to cause a denial of service (guest OS crash or hang) or possibly execute arbitrary code on the host OS via a crafted USB packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38158 - http://www.mail-archive.com/kvm%40vger.kernel.org/msg19581.html - http://marc.info/?l=oss-security&m=126527304127254&w=2 - http://www.
l-archive.com/kvm%40vger.kernel.org/msg19581.html - http://marc.info/?l=oss-security&m=126527304127254&w=2 - http://www.mail-archive.com/kvm%40vger.kernel.org/msg18447.html - https://rhn.redhat.com/errata/RHSA-2010-0088.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/56194 - http://www.mail-archive.com/kvm%40vger.kernel.org/msg19596.html - https://bugzilla.redhat.com/show_bug.cgi?id=557025 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11786 - http://marc.info/?l=oss-security&m=126510479211473&w=2 - http://git.savannah.gnu.org/cgit/qemu.git/commit/?id=babd03fde68093482528010a5435c14ce9128e3f - http://wiki.qemu.org/ChangeLog
CVE ID: CVE-2010-0298 State: PUBLISHED Published: 2010-02-12T19:00:00 Last Updated: 2024-08-07T00:45:12.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: The x86 emulator in KVM 83 does not use the Current Privilege Level (CPL) and I/O Privilege Level (IOPL) in determining the memory access available to CPL3 code, which allows guest OS users to cause a denial of service (guest OS crash) or gain privileges on the guest OS by leveraging access to a (1) IO port or (2) MMIO region, a related issue to CVE-2010-0306. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38158 - https://bugzilla.redhat.com/show_bug.cgi?id=559091 - https://ov
: References: - http://www.securityfocus.com/bid/38158 - https://bugzilla.redhat.com/show_bug.cgi?id=559091 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11335 - https://rhn.redhat.com/errata/RHSA-2010-0088.html - http://www.debian.org/security/2010/dsa-1996 - https://rhn.redhat.com/errata/RHSA-2010-0095.html - http://secunia.com/advisories/38492
CVE ID: CVE-2010-0299 State: PUBLISHED Published: 2010-02-22T18:00:00Z Last Updated: 2024-08-07T00:45:11.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: openSUSE 11.2 installs the devtmpfs root directory with insecure permissions (1777), which allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00002.html
CVE ID: CVE-2010-0300 State: PUBLISHED Published: 2010-02-04T18:00:00Z Last Updated: 2024-08-07T00:45:12.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: cache.c in ircd-ratbox before 2.2.9 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a HELP command. Additional Analyst Notes: - CVE Program Container: References: - http://lists.ratbox.org/pipermail/ircd-ratbox/2010-January/000891.html - http://www.debian.org/security/2010/dsa-1980 - http://secunia.com/advisories/38383 - http://security.debian.org/pool/updates/main/i/ircd-ratbox/ircd-ratbox_2.2.8.dfsg-2+lenny1.diff.gz - http://secunia.com/advisories/38210
CVE ID: CVE-2010-0301 State: PUBLISHED Published: 2010-02-04T18:00:00 Last Updated: 2024-08-07T00:45:11.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: main.C in maildrop 2.3.0 and earlier, when run by root with the -d option, uses the gid of root for execution of the .mailfilter file in a user's home directory, which allows local users to gain privileges via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2010/dsa-1981 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=564601 - http://secunia.com/advisories/38374 - http://marc.info/?l=oss-security&m=126468618017829&w=2 - http://www.courier-mta.org/maildrop/chang
om/advisories/38374 - http://marc.info/?l=oss-security&m=126468618017829&w=2 - http://www.courier-mta.org/maildrop/changelog.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/55980 - http://marc.info/?l=oss-security&m=126468324913920&w=2 - https://bugzilla.redhat.com/show_bug.cgi?id=559681 - http://marc.info/?l=oss-security&m=126468551017070&w=2 - http://securitytracker.com/id?1023515 - http://secunia.com/advisories/38367 - http://marc.info/?l=oss-security&m=126462927918840&w=2