Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-1130 State: PUBLISHED Published: 2010-03-26T20:00:00Z Last Updated: 2024-09-16T23:36:19.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: session.c in the session extension in PHP before 5.2.13, and 5.3.1, does not properly interpret ; (semicolon) characters in the argument to the session_save_path function, which allows context-dependent attackers to bypass open_basedir and safe_mode restrictions via an argument that contains multiple ; characters in conjunction with a .. (dot dot). Additional Analyst Notes: - CVE Program Container: References: - http://svn.php.net/viewvc/php/php-src/branches/PHP_5_2/ext/session/session.c?r1=293036&r2=294272 - http://www.vupen
s: - http://svn.php.net/viewvc/php/php-src/branches/PHP_5_2/ext/session/session.c?r1=293036&r2=294272 - http://www.vupen.com/english/advisories/2010/0479 - http://www.php.net/releases/5_2_13.php - http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/ext/session/session.c?r1=293036&r2=294272 - http://www.php.net/ChangeLog-5.php - http://secunia.com/advisories/38708 - http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/ext/session/session.c?view=log - http://svn.php.net/viewvc/php/php-src/branches/PHP_5_2/ext/session/session.c?view=log - http://securitytracker.com/id?1023661 - http://securityreason.com/achievement_securityalert/82 - http://securityreason.com/securityalert/7008
CVE ID: CVE-2010-1131 State: PUBLISHED Published: 2010-03-26T21:00:00Z Last Updated: 2024-09-16T18:28:42.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: JavaScriptCore.dll, as used in Apple Safari 4.0.5 on Windows XP SP3, allows remote attackers to cause a denial of service (application crash) via an HTML document composed of many successive occurrences of the <object> substring. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38884 - http://www.securityfocus.com/data/vulnerabilities/exploits/38884.php
CVE ID: CVE-2010-1132 State: PUBLISHED Published: 2010-03-26T21:00:00 Last Updated: 2024-08-07T01:14:06.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mlfi_envrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allows remote attackers to execute arbitrary system commands via shell metacharacters in the RCPT TO field of an email message. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/0559 - http://archives.neohapsis.com/archives/fulldisclosure/2010-03/0139.html - http://www.vupen.com/english/advisories/2010/0683 - http://secunia.com/advisories/39265 - http://w
e/2010-03/0139.html - http://www.vupen.com/english/advisories/2010/0683 - http://secunia.com/advisories/39265 - http://www.vupen.com/english/advisories/2010/0837 - http://www.securityfocus.com/bid/38578 - https://bugzilla.redhat.com/show_bug.cgi?id=572117 - http://www.debian.org/security/2010/dsa-2021 - https://savannah.nongnu.org/bugs/?29136 - http://www.exploit-db.com/exploits/11662 - http://bugs.debian.org/573228 - http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038535.html - http://www.securitytracker.com/id?1023691 - http://osvdb.org/62809 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56732 - http://secunia.com/advisories/38956 - http://secunia.com/advisori
//exchange.xforce.ibmcloud.com/vulnerabilities/56732 - http://secunia.com/advisories/38956 - http://secunia.com/advisories/38840 - http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038777.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038572.html
CVE ID: CVE-2010-1133 State: PUBLISHED Published: 2010-03-26T21:00:00 Last Updated: 2024-08-07T01:14:06.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in TikiWiki CMS/Groupware 4.x before 4.2 allow remote attackers to execute arbitrary SQL commands via unspecified vectors, probably related to (1) tiki-searchindex.php and (2) tiki-searchresults.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38608 - http://info.tikiwiki.org/article86-Tiki-Announces-3-5-and-4-2-Releases - http://secunia.com/advisories/38896 - http://osvdb.org/62800 - http://tikiwiki.svn.sourceforge.net/viewvc/tikiwiki
ses - http://secunia.com/advisories/38896 - http://osvdb.org/62800 - http://tikiwiki.svn.sourceforge.net/viewvc/tikiwiki?view=rev&revision=25435 - http://tikiwiki.svn.sourceforge.net/viewvc/tikiwiki?view=rev&revision=25424 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56769
CVE ID: CVE-2010-1134 State: PUBLISHED Published: 2010-03-26T21:00:00 Last Updated: 2024-08-07T01:14:06.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the _find function in searchlib.php in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to execute arbitrary SQL commands via the $searchDate variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38608 - http://info.tikiwiki.org/article86-Tiki-Announces-3-5-and-4-2-Releases - http://osvdb.org/62800 - http://tikiwiki.svn.sourceforge.net/viewvc/tikiwiki?view=rev&revision=25429 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5
iki.svn.sourceforge.net/viewvc/tikiwiki?view=rev&revision=25429 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56769 - http://secunia.com/advisories/38882
CVE ID: CVE-2010-1135 State: PUBLISHED Published: 2010-03-26T21:00:00 Last Updated: 2024-08-07T01:14:05.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: The user_logout function in TikiWiki CMS/Groupware 4.x before 4.2 does not properly delete user login cookies, which allows remote attackers to gain access via cookie reuse. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38608 - http://info.tikiwiki.org/article86-Tiki-Announces-3-5-and-4-2-Releases - http://secunia.com/advisories/38896 - http://tikiwiki.svn.sourceforge.net/viewvc/tikiwiki?view=rev&revision=25046 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56770
CVE ID: CVE-2010-1136 State: PUBLISHED Published: 2010-03-26T21:00:00 Last Updated: 2024-08-07T01:14:05.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Standard Remember method in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to bypass access restrictions related to "persistent login," probably due to the generation of predictable cookies based on the IP address and User agent in userslib.php. Additional Analyst Notes: - CVE Program Container: References: - http://tikiwiki.svn.sourceforge.net/viewvc/tikiwiki?view=rev&revision=25196 - http://www.securityfocus.com/bid/38608 - http://info.tikiwiki.org/article86-Tiki-Announces-3-5-and-4-2-Releases - http://osv
://www.securityfocus.com/bid/38608 - http://info.tikiwiki.org/article86-Tiki-Announces-3-5-and-4-2-Releases - http://osvdb.org/62801 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56771 - http://tikiwiki.svn.sourceforge.net/viewvc/tikiwiki/branches/proposals/3.x/lib/userslib.php?r1=25196&r2=25195&pathrev=25196 - http://secunia.com/advisories/38882
CVE ID: CVE-2010-1137 State: PUBLISHED Published: 2010-04-01T19:00:00 Last Updated: 2024-08-07T01:14:05.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WebAccess in VMware VirtualCenter 2.0.2 and 2.5 and VMware ESX 3.0.3 and 3.5, and the Server Console in VMware Server 1.0, allows remote attackers to inject arbitrary web script or HTML via the name of a virtual machine. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39037 - http://security.gentoo.org/glsa/glsa-201209-25.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6863 - http://lists.v
09-25.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6863 - http://lists.vmware.com/pipermail/security-announce/2010/000086.html - http://www.vmware.com/security/advisories/VMSA-2010-0005.html - http://www.securitytracker.com/id?1023769
CVE ID: CVE-2010-1138 State: PUBLISHED Published: 2010-04-12T18:00:00 Last Updated: 2024-08-07T01:14:05.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: The virtual networking stack in VMware Workstation 7.0 before 7.0.1 build 227600, VMware Workstation 6.5.x before 6.5.4 build 246459 on Windows, VMware Player 3.0 before 3.0.1 build 227600, VMware Player 2.5.x before 2.5.4 build 246459 on Windows, VMware ACE 2.6 before 2.6.1 build 227600 and 2.5.x before 2.5.4 build 246459, VMware Server 2.x, and VMware Fusion 3.0 before 3.0.1 build 232708 and 2.x before 2.0.7 build 246742 allows remote attackers to obtain sensitive information from memory on the host OS by examining received
7 build 246742 allows remote attackers to obtain sensitive information from memory on the host OS by examining received network packets, related to interaction between the guest OS and the host vmware-vmx process. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201209-25.xml - http://secunia.com/advisories/39206 - http://lists.vmware.com/pipermail/security-announce/2010/000090.html - http://secunia.com/advisories/39203 - http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html - http://www.securitytracker.com/id?1023836 - http://www.securityfocus.com/bid/39395 - http://www.vmware.com/security/advisories/VMSA-2010-0007.html - http:
1023836 - http://www.securityfocus.com/bid/39395 - http://www.vmware.com/security/advisories/VMSA-2010-0007.html - http://secunia.com/advisories/39215 - http://osvdb.org/63607 - http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html
CVE ID: CVE-2010-1139 State: PUBLISHED Published: 2010-04-12T18:00:00 Last Updated: 2024-08-07T01:14:06.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in vmrun in VMware VIX API 1.6.x, VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, and VMware Server 2.x on Linux, and VMware Fusion 2.x before 2.0.7 build 246742, allows local users to gain privileges via format string specifiers in process metadata. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201209-25.xml - http://secunia.com/advisories/39206 - http://lists.vmware.com/pipermail/security-ann
entoo.org/glsa/glsa-201209-25.xml - http://secunia.com/advisories/39206 - http://lists.vmware.com/pipermail/security-announce/2010/000090.html - http://www.securityfocus.com/bid/39407 - http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html - http://www.vmware.com/security/advisories/VMSA-2010-0007.html - http://osvdb.org/63606 - http://secunia.com/advisories/39201 - http://secunia.com/advisories/39215 - http://www.securitytracker.com/id?1023835 - http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html
CVE ID: CVE-2010-1140 State: PUBLISHED Published: 2010-04-12T18:00:00 Last Updated: 2024-08-07T01:14:06.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: The USB service in VMware Workstation 7.0 before 7.0.1 build 227600 and VMware Player 3.0 before 3.0.1 build 227600 on Windows might allow host OS users to gain privileges by placing a Trojan horse program at an unspecified location on the host OS disk. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201209-25.xml - http://secunia.com/advisories/39206 - http://lists.vmware.com/pipermail/security-announce/2010/000090.html - http://archives.neohapsis.com/archives/bugtraq/2010
tp://lists.vmware.com/pipermail/security-announce/2010/000090.html - http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html - http://www.vmware.com/security/advisories/VMSA-2010-0007.html - http://www.securityfocus.com/bid/39397 - http://securitytracker.com/id?1023834 - http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html
CVE ID: CVE-2010-1141 State: PUBLISHED Published: 2010-04-12T18:00:00 Last Updated: 2024-08-07T01:14:06.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x before 2.0.2 build 203138; VMware Fusion 2.x before 2.0.6 build 246742; VMware ESXi 3.5 and 4.0; and VMware ESX 2.5.5, 3.0.3, 3.5, and 4.0 does not properly access libraries, which allows user-assisted remote attackers to execute arbitrary code by tricking a Windows guest OS user into clicking on a file that is stored on a network share. Additional Anal
rary code by tricking a Windows guest OS user into clicking on a file that is stored on a network share. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201209-25.xml - http://secunia.com/advisories/39206 - http://lists.vmware.com/pipermail/security-announce/2010/000090.html - http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html - http://www.securitytracker.com/id?1023833 - http://secunia.com/advisories/39198 - http://www.securitytracker.com/id?1023832 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7020 - http://www.vmware.com/security/advisories/VMSA-2010-0007.html - http://archives.n
n/oval%3Aorg.mitre.oval%3Adef%3A7020 - http://www.vmware.com/security/advisories/VMSA-2010-0007.html - http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html
CVE ID: CVE-2010-1142 State: PUBLISHED Published: 2010-04-12T18:00:00 Last Updated: 2024-08-07T01:14:06.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x before 2.0.2 build 203138; VMware Fusion 2.x before 2.0.6 build 246742; VMware ESXi 3.5 and 4.0; and VMware ESX 2.5.5, 3.0.3, 3.5, and 4.0 does not properly load VMware programs, which might allow Windows guest OS users to gain privileges by placing a Trojan horse program at an unspecified location on the guest OS disk. Additional Analyst Notes: - CVE P
ges by placing a Trojan horse program at an unspecified location on the guest OS disk. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201209-25.xml - http://secunia.com/advisories/39206 - http://lists.vmware.com/pipermail/security-announce/2010/000090.html - http://www.securityfocus.com/bid/39394 - http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html - http://www.acrossecurity.com/aspr/ASPR-2010-04-12-2-PUB.txt - http://www.securitytracker.com/id?1023833 - http://secunia.com/advisories/39198 - http://www.securitytracker.com/id?1023832 - http://www.vmware.com/security/advisories/VMSA-2010-0007.html - http://archives.neohapsis.
uritytracker.com/id?1023832 - http://www.vmware.com/security/advisories/VMSA-2010-0007.html - http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html
CVE ID: CVE-2010-1143 State: PUBLISHED Published: 2010-05-07T17:43:00 Last Updated: 2024-08-07T01:14:06.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in VMware View (formerly Virtual Desktop Manager or VDM) 3.1.x before 3.1.3 build 252693 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2010-0008.html - http://security.gentoo.org/glsa/glsa-201209-25.xml - http://securitytracker.com/id?1023945 - http://lists.vmware.com/pipermail/security-announce/2010/000092.html - https://oval.cisecuri
itytracker.com/id?1023945 - http://lists.vmware.com/pipermail/security-announce/2010/000092.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16298 - http://www.securityfocus.com/bid/39949
CVE ID: CVE-2010-1144 State: REJECTED Published: 2010-04-06T16:00:00Z Last Updated: 2024-09-16T22:36:13.177Z Description: No description available.
CVE ID: CVE-2010-1145 State: REJECTED Published: 2010-05-20T21:00:00Z Last Updated: 2024-09-16T23:26:44.984Z Description: No description available.
CVE ID: CVE-2010-1146 State: PUBLISHED Published: 2010-04-12T18:00:00 Last Updated: 2024-08-07T01:14:05.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel 2.6.33.2 and earlier, when a ReiserFS filesystem exists, does not restrict read or write access to the .reiserfs_priv directory, which allows local users to gain privileges by modifying (1) extended attributes or (2) ACLs, as demonstrated by deleting a file under .reiserfs_priv/xattrs/. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39316 - http://www.exploit-db.com/exploits/12130 - https://bugzilla.redhat.com/show_bug.cgi?id=568041 - http://osvdb.org/63601 - htt
://www.exploit-db.com/exploits/12130 - https://bugzilla.redhat.com/show_bug.cgi?id=568041 - http://osvdb.org/63601 - http://www.securityfocus.com/bid/39344 - http://marc.info/?l=linux-kernel&m=127076012022155&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57782
CVE ID: CVE-2010-1147 State: PUBLISHED Published: 2010-04-06T16:00:00 Last Updated: 2024-08-07T01:14:06.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Open Direct Connect Hub (aka Open DC Hub or OpenDCHub) 0.8.1 allows remote authenticated users to execute arbitrary code via a long MyINFO message. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-April/040380.html - http://www.vupen.com/english/advisories/2010/1044 - http://openwall.com/lists/oss-security/2010/04/03/1 - http://lists.fedoraproject.org/pipermail/package-announce/2010-April/040360.html - http://secunia.c
urity/2010/04/03/1 - http://lists.fedoraproject.org/pipermail/package-announce/2010-April/040360.html - http://secunia.com/advisories/39664 - http://www.securityfocus.com/archive/1/510428 - http://marc.info/?l=oss-security&m=127051570728944&w=2 - http://www.vupen.com/english/advisories/2010/1023 - http://www.indahax.com/exploits/opendchub-0-8-1-remote-code-execution-exploit#more-600 - http://www.securityfocus.com/bid/39129 - http://lists.fedoraproject.org/pipermail/package-announce/2010-April/040421.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=576308 - https://bugzilla.redhat.com/show_bug.cgi?id=579206
CVE ID: CVE-2010-1148 State: PUBLISHED Published: 2010-04-12T17:00:00 Last Updated: 2024-08-07T01:14:05.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cifs_create function in fs/cifs/dir.c in the Linux kernel 2.6.33.2 and earlier allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a NULL nameidata (aka nd) field in a POSIX file-creation request to a server that supports UNIX extensions. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2010/04/06/2 - http://lists.samba.org/archive/linux-cifs-client/2010-April/005746.html - https://exchange.x
oss-security/2010/04/06/2 - http://lists.samba.org/archive/linux-cifs-client/2010-April/005746.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/57561 - http://lists.samba.org/archive/linux-cifs-client/2010-April/005757.html - http://www.securityfocus.com/bid/39186 - http://xorl.wordpress.com/2010/04/05/linux-kernel-unix-extensions-cifs-null-pointer-dereference/ - http://secunia.com/advisories/39344 - https://bugzilla.redhat.com/show_bug.cgi?id=579445 - http://marc.info/?l=oss-security&m=127045779122119&w=2 - http://lists.samba.org/archive/linux-cifs-client/2010-April/005742.html - http://lists.samba.org/archive/linux-cifs-client/2010-April/005741.html - http://marc.info/?l=oss-sec
pril/005742.html - http://lists.samba.org/archive/linux-cifs-client/2010-April/005741.html - http://marc.info/?l=oss-security&m=127045754521927&w=2
CVE ID: CVE-2010-1149 State: PUBLISHED Published: 2010-04-12T18:00:00Z Last Updated: 2024-08-07T01:14:06.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: probers/udisks-dm-export.c in udisks before 1.0.1 exports UDISKS_DM_TARGETS_PARAMS information to udev even for a crypt UDISKS_DM_TARGETS_TYPE, which allows local users to discover encryption keys by (1) running a certain udevadm command or (2) reading a certain file under /dev/.udev/db/. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039060.html - https://bugzilla.novell.com/show_bug.cgi?id=594261 - https://launchpad.net/bugs/556651 - http
e/2010-April/039060.html - https://bugzilla.novell.com/show_bug.cgi?id=594261 - https://launchpad.net/bugs/556651 - https://bugs.freedesktop.org/show_bug.cgi?id=27494 - http://secunia.com/advisories/39332 - http://www.securityfocus.com/bid/39265 - https://bugzilla.redhat.com/show_bug.cgi?id=580005 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=576687 - http://cgit.freedesktop.org/udisks/commit/?id=0fcc7cb3b66f23fac53ae08647aa0007a2bd56c4
CVE ID: CVE-2010-1150 State: PUBLISHED Published: 2010-04-20T15:00:00 Last Updated: 2024-08-07T01:14:06.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: MediaWiki before 1.15.3, and 1.6.x before 1.16.0beta2, does not properly handle a correctly authenticated but unintended login attempt, which makes it easier for remote authenticated users to conduct phishing attacks by arranging for a victim to login to the attacker's account and then execute a crafted user script, related to a "login CSRF" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1055 - http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_16_0beta2/p
: - http://www.vupen.com/english/advisories/2010/1055 - http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_16_0beta2/phase3/RELEASE-NOTES - http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_15_3/phase3/RELEASE-NOTES - http://download.wikimedia.org/mediawiki/1.16/mediawiki-1.16.0beta2.patch.gz - http://www.openwall.com/lists/oss-security/2010/04/08/4 - http://download.wikimedia.org/mediawiki/1.15/mediawiki-1.15.3.patch.gz - https://bugzilla.wikimedia.org/show_bug.cgi?id=23076 - http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-April/000090.html - http://www.openwall.com/lists/oss-security/2010/04/07/1 - https://bugzilla.redhat.com/show_bug.cgi?id=580418 - http://www.debian.org
penwall.com/lists/oss-security/2010/04/07/1 - https://bugzilla.redhat.com/show_bug.cgi?id=580418 - http://www.debian.org/security/2010/dsa-2041
CVE ID: CVE-2010-1151 State: PUBLISHED Published: 2010-04-20T16:00:00 Last Updated: 2024-08-07T01:14:06.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the mod_auth_shadow module for the Apache HTTP Server allows remote attackers to bypass authentication, and read and possibly modify data, via vectors related to improper interaction with an external helper application for validation of credentials. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/0908 - http://www.securityfocus.com/bid/39538 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:081 - http://lists.fedoraproject.org/pipermail
m/bid/39538 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:081 - http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041340.html - http://secunia.com/advisories/39823 - http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041326.html - https://bugzilla.redhat.com/show_bug.cgi?id=578168 - http://www.vupen.com/english/advisories/2010/1148