Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-1711 State: PUBLISHED Published: 2011-06-07T19:00:00 Last Updated: 2024-08-06T22:37:25.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Mobility Pack 1.1.2 and earlier in Novell Data Synchronizer 1.0.x, and 1.1.x through 1.1.1 build 428, allows remote authenticated users to access the accounts of other users via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/67840 - http://www.securityfocus.com/bid/48117 - http://www.securitytracker.com/id?1025608 - http://osvdb.org/72759 - http://secunia.com/advisories/44864 - http://www.novell.com/support/
tytracker.com/id?1025608 - http://osvdb.org/72759 - http://secunia.com/advisories/44864 - http://www.novell.com/support/viewContent.do?externalId=7008690
CVE ID: CVE-2011-1712 State: PUBLISHED Published: 2011-04-15T20:00:00 Last Updated: 2024-08-06T22:37:25.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: The txXPathNodeUtils::getXSLTId function in txMozillaXPathTreeWalker.cpp and txStandaloneXPathTreeWalker.cpp in Mozilla Firefox before 3.5.19, 3.6.x before 3.6.17, and 4.x before 4.0.1, and SeaMonkey before 2.0.14, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2011/mfsa2011-18.html - https://bugzi
s: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2011/mfsa2011-18.html - https://bugzilla.mozilla.org/show_bug.cgi?id=640339 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66836 - http://scarybeastsecurity.blogspot.com/2011/03/multi-browser-heap-address-leak-in-xslt.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14467
CVE ID: CVE-2011-1713 State: PUBLISHED Published: 2011-04-15T20:00:00 Last Updated: 2024-08-06T22:37:25.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft msxml.dll, as used in Internet Explorer 8 on Windows 7, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function. NOTE: this might overlap CVE-2011-1202. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12693 - http://scarybeastsecurity.blogspot.com/2011/03/multi-browser-heap-address-leak-in-xslt.html
.mitre.oval%3Adef%3A12693 - http://scarybeastsecurity.blogspot.com/2011/03/multi-browser-heap-address-leak-in-xslt.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/66835
CVE ID: CVE-2011-1714 State: PUBLISHED Published: 2011-04-18T18:00:00 Last Updated: 2024-08-06T22:37:25.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in framework/source/resource/qx/test/jsonp_primitive.php in QooxDoo 1.3 and possibly other versions, as used in eyeOS 2.2 and 2.3, and possibly other products allows remote attackers to inject arbitrary web script or HTML via the callback parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/17127 - http://osvdb.org/71720 - http://osvdb.org/71718 - http://www.securityfocus.com/bid/47184 - http://blog.eyeos.org/en/2011/04/07/about-
org/71720 - http://osvdb.org/71718 - http://www.securityfocus.com/bid/47184 - http://blog.eyeos.org/en/2011/04/07/about-some-eyeos-security-issues/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/66574 - http://secunia.com/advisories/43997 - http://secunia.com/advisories/43818 - http://www.autosectools.com/Advisories/eyeOS.2.3_Reflected.Cross-site.Scripting_172.html
CVE ID: CVE-2011-1715 State: PUBLISHED Published: 2011-04-18T18:00:00 Last Updated: 2024-08-06T22:37:25.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in framework/source/resource/qx/test/part/delay.php in QooxDoo 1.3 and possibly other versions, as used in eyeOS 2.2 and 2.3, and possibly other products allows remote attackers to read arbitrary files via ..%2f (encoded dot dot) sequences in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/66575 - http://www.exploit-db.com/exploits/17127 - http://osvdb.org/71721 - http://osvdb.org/71719 - http://www.autos
es/66575 - http://www.exploit-db.com/exploits/17127 - http://osvdb.org/71721 - http://osvdb.org/71719 - http://www.autosectools.com/Advisories/eyeOS.2.3_Local.File.Inclusion_173.html - http://www.securityfocus.com/bid/47184 - http://blog.eyeos.org/en/2011/04/07/about-some-eyeos-security-issues/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/66574 - http://secunia.com/advisories/43997 - http://secunia.com/advisories/43818
CVE ID: CVE-2011-1716 State: PUBLISHED Published: 2011-04-18T18:00:00 Last Updated: 2024-08-06T22:37:25.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Web UI in Xymon before 4.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/517325/100/0/threaded - http://www.securityfocus.com/bid/47156 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66542 - http://osvdb.org/71489 - http://www.securityfocus.com/archive/1/517316/100/0/threaded - http://securityreason.com/securityalert
osvdb.org/71489 - http://www.securityfocus.com/archive/1/517316/100/0/threaded - http://securityreason.com/securityalert/8209 - http://xymon.svn.sourceforge.net/viewvc/xymon/branches/4.3.2/Changes?revision=6673&view=markup - http://secunia.com/advisories/44036
CVE ID: CVE-2011-1717 State: PUBLISHED Published: 2011-04-18T18:00:00 Last Updated: 2024-08-06T22:37:25.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Skype for Android stores sensitive user data without encryption in sqlite3 databases that have weak permissions, which allows local applications to read user IDs, contacts, phone numbers, date of birth, instant message logs, and other private information. Additional Analyst Notes: - CVE Program Container: References: - http://www.androidpolice.com/2011/04/14/exclusive-vulnerability-in-skype-for-android-is-exposing-your-name-phone-number-chat-logs-and-a-lot-more/ - http://blogs.skype.com/security/2011/04/privacy_vulnerability_i
osing-your-name-phone-number-chat-logs-and-a-lot-more/ - http://blogs.skype.com/security/2011/04/privacy_vulnerability_in_skype.html - http://www.theregister.co.uk/2011/04/15/skype_for_android_vulnerable/ - http://www.securitytracker.com/id?1025387
CVE ID: CVE-2011-1718 State: PUBLISHED Published: 2011-04-27T00:00:00 Last Updated: 2024-08-06T22:37:25.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Agents component in CA SiteMinder R6 before SP6 CR2 and R12 before SP3 CR2 does not properly handle multi-line headers, which allows remote authenticated users to conduct impersonation attacks and gain privileges via crafted data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/517626/100/0/threaded - http://securityreason.com/securityalert/8227 - http://www.securityfocus.com/bid/47520 - http://www.vupen.com/english/advisories/2011/1067 - https://exchange.xforce.i
- http://www.securityfocus.com/bid/47520 - http://www.vupen.com/english/advisories/2011/1067 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66906 - http://securitytracker.com/id?1025423 - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7B1BF29B14-C5FB-4BD3-9113-68E2426E4381%7D - http://secunia.com/advisories/44218
CVE ID: CVE-2011-1719 State: PUBLISHED Published: 2011-04-27T00:00:00 Last Updated: 2024-08-06T22:37:25.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the Web Viewer ActiveX controls in CA Output Management Web Viewer 11.0 and 11.5 allow remote attackers to execute arbitrary code via (1) a long SRC property value to the PPSViewer ActiveX control in PPSView.ocx before 1.0.0.7 or (2) a long Title property value to the UOMWV_Helper ActiveX control in UOMWV_HelperActiveX.ocx before 11.5.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/66904 - http://secunia.com/advi
VE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/66904 - http://secunia.com/advisories/43681 - http://www.securityfocus.com/archive/1/517625/100/0/threaded - http://www.vupen.com/english/advisories/2011/1066 - http://securitytracker.com/id?1025424 - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7BDED5B724-B500-46DA-A855-B2AF457B5364%7D - http://secunia.com/secunia_research/2011-35/ - http://www.securityfocus.com/bid/47521 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66903 - http://secunia.com/secunia_research/2011-34/ - http://securityreason.com/securityalert/8226
CVE ID: CVE-2011-1720 State: PUBLISHED Published: 2011-05-13T17:00:00 Last Updated: 2024-08-06T22:37:25.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SMTP server in Postfix before 2.5.13, 2.6.x before 2.6.10, 2.7.x before 2.7.4, and 2.8.x before 2.8.3, when certain Cyrus SASL authentication methods are enabled, does not create a new server handle after client authentication fails, which allows remote attackers to cause a denial of service (heap memory corruption and daemon crash) or possibly execute arbitrary code via an invalid AUTH command with one method followed by an AUTH command with a different method. Additional Analyst Notes: - CVE Program Container: References
ethod followed by an AUTH command with a different method. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/517917/100/0/threaded - http://www.postfix.org/CVE-2011-1720.html - http://secunia.com/advisories/44500 - http://www.securityfocus.com/bid/47778 - http://security.gentoo.org/glsa/glsa-201206-33.xml - http://www.osvdb.org/72259 - http://www.kb.cert.org/vuls/id/727230 - http://www.securitytracker.com/id?1025521 - http://www.mail-archive.com/postfix-announce%40postfix.org/msg00007.html - http://www.postfix.org/announcements/postfix-2.8.3.html - http://securityreason.com/securityalert/8247 - http://lists.opensuse.org/opensuse-security-
cements/postfix-2.8.3.html - http://securityreason.com/securityalert/8247 - http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00002.html - https://bugzilla.redhat.com/show_bug.cgi?id=699035 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:090 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://www.debian.org/security/2011/dsa-2233 - http://www.ubuntu.com/usn/usn-1131-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67359
CVE ID: CVE-2011-1721 State: PUBLISHED Published: 2011-04-19T19:00:00 Last Updated: 2024-08-06T22:37:25.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in php/partie_administrateur/administration.php in WebJaxe 1.02 allows remote attackers to hijack the authentication of administrators for requests that (1) modify passwords or (2) add new projects. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.htbridge.ch/advisory/csrf_cross_site_request_forgery_in_webjaxe.html - http://www.securityfocus.com/archive/1/517434/100/0/threaded - http
ry/csrf_cross_site_request_forgery_in_webjaxe.html - http://www.securityfocus.com/archive/1/517434/100/0/threaded - http://osvdb.org/71844 - http://secunia.com/advisories/44118 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66757 - http://securityreason.com/securityalert/8212
CVE ID: CVE-2011-1722 State: PUBLISHED Published: 2011-04-19T19:00:00 Last Updated: 2024-08-06T22:37:25.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in WEC Discussion Forum (wec_discussion) extension 2.1.0 and earlier for TYPO3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors, as exploited in the wild in April 2011. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/71674 - http://www.vupen.com/english/advisories/2011/0896 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2011-003/ - http://secunia.com/advisories/44055 - https://exchange.xforce.ibmcloud.com/vul
y/security-bulletins/typo3-sa-2011-003/ - http://secunia.com/advisories/44055 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66619 - http://www.securityfocus.com/bid/47257 - http://typo3.org/extensions/repository/view/wec_discussion/2.1.1/
CVE ID: CVE-2011-1723 State: PUBLISHED Published: 2011-04-19T19:00:00 Last Updated: 2024-08-06T22:37:25.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in app/views/layouts/base.rhtml in Redmine 1.0.1 through 1.1.1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to projects/hg-helloworld/news/. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/47193 - http://secunia.com/advisories/43999 - http://www.securityfocus.com/archive/1/517355/100/0/threaded - http://www.vupen.com/english/advisor
m/advisories/43999 - http://www.securityfocus.com/archive/1/517355/100/0/threaded - http://www.vupen.com/english/advisories/2011/0895 - http://securityreason.com/securityalert/8211 - http://osvdb.org/71564 - http://www.redmine.org/news/53 - http://www.mavitunasecurity.com/XSS-vulnerability-in-Redmine/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/66612
CVE ID: CVE-2011-1724 State: PUBLISHED Published: 2011-05-03T19:00:00 Last Updated: 2024-08-06T22:37:25.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Virtual Server Environment before 6.3 allows remote authenticated users to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=130339296506866&w=2 - http://secunia.com/advisories/44227 - http://www.securitytracker.com/id?1025429 - http://securityreason.com/securityalert/8239 - http://www.vupen.com/english/advisories/2011/1065 - http://marc.info/?l=bugtraq&m=130339296506866&w=2
CVE ID: CVE-2011-1725 State: PUBLISHED Published: 2011-04-27T00:00:00 Last Updated: 2024-08-06T22:37:25.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/44319 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67021 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02789514 - http://www.securityfocus.com/bid/47550 - http://secunia.com/advisories/44304 - http://www.securitytracker.com/id?1025435 - ht
//www.securityfocus.com/bid/47550 - http://secunia.com/advisories/44304 - http://www.securitytracker.com/id?1025435 - http://osvdb.org/72049 - http://www.vupen.com/english/advisories/2011/1090 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02789514
CVE ID: CVE-2011-1726 State: PUBLISHED Published: 2011-05-03T20:00:00 Last Updated: 2024-08-06T22:37:25.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8235 - http://www.securitytracker.com/id?1025436 - http://secunia.com/advisories/44354 - http://marc.info/?l=bugtraq&m=130374351406700&w=2 - http://osvdb.org/72060 - http://www.vupen.com/english/advisories/2011/1091 - http://marc.info/?l=bugtraq&m=13037
0&w=2 - http://osvdb.org/72060 - http://www.vupen.com/english/advisories/2011/1091 - http://marc.info/?l=bugtraq&m=130374351406700&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67018 - http://secunia.com/advisories/44322 - http://www.securityfocus.com/bid/47554
CVE ID: CVE-2011-1727 State: PUBLISHED Published: 2011-05-03T20:00:00 Last Updated: 2024-08-06T22:37:25.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to an "HTML injection" issue. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8235 - http://www.securitytracker.com/id?1025436 - http://secunia.com/advisories/44354 - http://marc.info/?l=bugtraq&m=130374351406700&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67020 - http://www.vu
/marc.info/?l=bugtraq&m=130374351406700&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67020 - http://www.vupen.com/english/advisories/2011/1091 - http://marc.info/?l=bugtraq&m=130374351406700&w=2 - http://osvdb.org/72061 - http://secunia.com/advisories/44322 - http://www.securityfocus.com/bid/47554
CVE ID: CVE-2011-1728 State: PUBLISHED Published: 2011-05-07T19:00:00 Last Updated: 2024-08-06T22:37:25.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed EXEC_BAR message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/517764/100/0/threaded - http://zerodayinitiative.com/advisories/ZDI-11-144/ - http://www.securityfocus.com/bid/47638 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67201 - http://h20000.www2.hp.com/bizsup
urityfocus.com/bid/47638 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67201 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240 - http://secunia.com/advisories/44402 - http://osvdb.org/72187 - http://www.securitytracker.com/id?1025454
CVE ID: CVE-2011-1729 State: PUBLISHED Published: 2011-05-07T19:00:00 Last Updated: 2024-08-06T22:37:25.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed GET_FILE message. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-11-145/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/67202 - http://www.securityfocus.com/bid/47638 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240 - http://h2000
ityfocus.com/bid/47638 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240 - http://secunia.com/advisories/44402 - http://www.securitytracker.com/id?1025454 - http://osvdb.org/72188 - http://www.securityfocus.com/archive/1/517765/100/0/threaded
CVE ID: CVE-2011-1730 State: PUBLISHED Published: 2011-05-07T19:00:00 Last Updated: 2024-08-06T22:37:25.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed EXEC_SCRIPT message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/47638 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67203 - http://zerodayinitiative.com/advisories/ZDI-11-146/ - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240 - http://h2
om/advisories/ZDI-11-146/ - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240 - http://secunia.com/advisories/44402 - http://www.securitytracker.com/id?1025454 - http://osvdb.org/72189 - http://www.securityfocus.com/archive/1/517767/100/0/threaded
CVE ID: CVE-2011-1731 State: PUBLISHED Published: 2011-05-07T19:00:00 Last Updated: 2024-08-06T22:37:25.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed EXEC_INTEGUTIL message. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-11-147/ - http://www.securityfocus.com/bid/47638 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objec
upport/TechSupport/Document.jsp?objectID=c02810240 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240 - http://secunia.com/advisories/44402 - http://www.securitytracker.com/id?1025454 - http://www.securityfocus.com/archive/1/517768/100/0/threaded - http://osvdb.org/72190
CVE ID: CVE-2011-1732 State: PUBLISHED Published: 2011-05-07T19:00:00 Last Updated: 2024-08-06T22:37:25.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed stutil message. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/72191 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67205 - http://www.securityfocus.com/archive/1/517766/100/0/threaded - http://www.securityfocus.com/bid/47638 - http://zerodayinitiative.com/advisories/ZDI-11-148/ - http://h2
00/0/threaded - http://www.securityfocus.com/bid/47638 - http://zerodayinitiative.com/advisories/ZDI-11-148/ - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240 - http://secunia.com/advisories/44402 - http://www.securitytracker.com/id?1025454
CVE ID: CVE-2011-1733 State: PUBLISHED Published: 2011-05-07T19:00:00 Last Updated: 2024-08-06T22:37:25.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed HPFGConfig message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/67206 - http://osvdb.org/72192 - http://www.securityfocus.com/bid/47638 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240 - http://h20000.www2.hp.com/bizsupport/Te
tp://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240 - http://www.securityfocus.com/archive/1/517769/100/0/threaded - http://secunia.com/advisories/44402 - http://www.securitytracker.com/id?1025454 - http://zerodayinitiative.com/advisories/ZDI-11-149/