Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-1003 State: PUBLISHED Published: 2011-02-23T18:00:00 Last Updated: 2024-08-06T22:14:26.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the vba_read_project_strings function in vba_extract.c in libclamav in ClamAV before 0.97 might allow remote attackers to execute arbitrary code via crafted Visual Basic for Applications (VBA) data in a Microsoft Office document. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1025100 - http://www.securityfocus.com/bid/46470 - http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=blob
acker.com/id?1025100 - http://www.securityfocus.com/bid/46470 - http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=blob%3Bf=ChangeLog%3Bhb=clamav-0.97 - http://osvdb.org/70937 - http://openwall.com/lists/oss-security/2011/02/21/1 - http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=commit%3Bh=d21fb8d975f8c9688894a8cef4d50d977022e09f - https://exchange.xforce.ibmcloud.com/vulnerabilities/65544 - http://www.vupen.com/english/advisories/2011/0458 - http://secunia.com/advisories/43752 - http://www.vupen.com/english/advisories/2011/0453 - http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html - http://www.mandriva.com/en/support/security/advisories/?name=MDVA-2011:007 - http
urity-announce/2011-04/msg00000.html - http://www.mandriva.com/en/support/security/advisories/?name=MDVA-2011:007 - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2486 - http://www.vupen.com/english/advisories/2011/0523 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055777.html - http://www.ubuntu.com/usn/USN-1076-1 - http://openwall.com/lists/oss-security/2011/02/21/4 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055771.html - http://secunia.com/advisories/43392 - http://secunia.com/advisories/43498
CVE ID: CVE-2011-1004 State: PUBLISHED Published: 2011-03-02T19:00:00 Last Updated: 2024-08-06T22:14:26.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FileUtils.remove_entry_secure method in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, 1.8.8dev, 1.9.1 through 1.9.1-430, 1.9.2 through 1.9.2-136, and 1.9.3dev allows local users to delete arbitrary files via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2011-0910.html - http://www.securityfocus.com/bid/46460 - http://www.openwall.com/lists/oss-security/2011/02/21/5 - http://www.vupen.com/english/advisories/2011/0539 - http://www.redhat.
ww.openwall.com/lists/oss-security/2011/02/21/5 - http://www.vupen.com/english/advisories/2011/0539 - http://www.redhat.com/support/errata/RHSA-2011-0909.html - https://bugzilla.redhat.com/show_bug.cgi?id=678913 - http://secunia.com/advisories/43573 - http://www.openwall.com/lists/oss-security/2011/02/21/2 - http://osvdb.org/70958 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054422.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054436.html - http://secunia.com/advisories/43434 - http://www.ruby-lang.org/en/news/2011/02/18/fileutils-is-vulnerable-to-symlink-race-attacks/ - http://support.apple.com/kb/HT5281 - http://www.mandriva.com/secur
18/fileutils-is-vulnerable-to-symlink-race-attacks/ - http://support.apple.com/kb/HT5281 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:097 - http://lists.apple.com/archives/security-announce/2012/May/msg00001.html
CVE ID: CVE-2011-1005 State: PUBLISHED Published: 2011-03-02T19:00:00 Last Updated: 2024-08-06T22:14:26.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: The safe-level feature in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, and 1.8.8dev allows context-dependent attackers to modify strings via the Exception#to_s method, as demonstrated by changing an intended pathname. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2011-0910.html - http://www.openwall.com/lists/oss-security/2011/02/21/5 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:098 - http://www.vupen.com/english/advisories/2011/0539 - http
tp://www.mandriva.com/security/advisories?name=MDVSA-2011:098 - http://www.vupen.com/english/advisories/2011/0539 - http://www.redhat.com/support/errata/RHSA-2011-0909.html - https://bugzilla.redhat.com/show_bug.cgi?id=678920 - http://secunia.com/advisories/43573 - http://www.openwall.com/lists/oss-security/2011/02/21/2 - http://www.redhat.com/support/errata/RHSA-2011-0908.html - http://osvdb.org/70957 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054422.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054436.html - http://www.securityfocus.com/bid/46458 - http://support.apple.com/kb/HT5281 - http://www.mandriva.com/security/advisories?name
/www.securityfocus.com/bid/46458 - http://support.apple.com/kb/HT5281 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:097 - http://lists.apple.com/archives/security-announce/2012/May/msg00001.html - http://secunia.com/advisories/43420 - http://www.ruby-lang.org/en/news/2011/02/18/exception-methods-can-bypass-safe/
CVE ID: CVE-2011-1006 State: PUBLISHED Published: 2011-03-22T17:00:00 Last Updated: 2024-08-06T22:14:27.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the parse_cgroup_spec function in tools/tools-common.c in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 allows local users to gain privileges via a crafted controller list on the command line of an application. NOTE: it is not clear whether this issue crosses privilege boundaries. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43758 - https://bugzilla.redhat.com/show_bug.cgi?id=678107 - http://secunia.com/advisories/4
tp://secunia.com/advisories/43758 - https://bugzilla.redhat.com/show_bug.cgi?id=678107 - http://secunia.com/advisories/44093 - http://www.securityfocus.com/bid/46729 - http://sourceforge.net/projects/libcg/files/libcgroup/v0.37.1/libcgroup-0.37.1.tar.bz2/download - http://libcg.git.sourceforge.net/git/gitweb.cgi?p=libcg/libcg%3Ba=commit%3Bh=5ae8aea1ecd60c439121d3329d8eaabf13d292c1 - http://secunia.com/advisories/43891 - http://www.debian.org/security/2011/dsa-2193 - http://lists.opensuse.org/opensuse-updates/2011-04/msg00027.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056683.html - http://www.vupen.com/english/advisories/2011/0679 - http://www.vupen.com/englis
ackage-announce/2011-March/056683.html - http://www.vupen.com/english/advisories/2011/0679 - http://www.vupen.com/english/advisories/2011/0774 - http://www.redhat.com/support/errata/RHSA-2011-0320.html - http://secunia.com/advisories/43611 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056734.html - http://www.securitytracker.com/id?1025158
CVE ID: CVE-2011-1007 State: PUBLISHED Published: 2011-02-28T15:00:00 Last Updated: 2024-08-06T22:14:26.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Best Practical Solutions RT before 3.8.9 does not perform certain redirect actions upon a login, which allows physically proximate attackers to obtain credentials by resubmitting the login form via the back button of a web browser on an unattended workstation after an RT logout. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/02/24/9 - http://openwall.com/lists/oss-security/2011/02/23/22 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=614575 - http://openwall.com/
ll.com/lists/oss-security/2011/02/23/22 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=614575 - http://openwall.com/lists/oss-security/2011/02/24/7 - http://openwall.com/lists/oss-security/2011/02/22/12 - http://issues.bestpractical.com/Ticket/Display.html?id=15804 - http://openwall.com/lists/oss-security/2011/02/24/8 - https://github.com/bestpractical/rt/commit/917c211820590950f7eb0521f7f43b31aeed44c4 - http://secunia.com/advisories/43438 - http://openwall.com/lists/oss-security/2011/02/22/16 - https://github.com/bestpractical/rt/commit/057552287159e801535e59b8fbd5bd98d1322069 - http://lists.bestpractical.com/pipermail/rt-announce/2011-February/000186.html - https://exchange.xforce.ibmc
d1322069 - http://lists.bestpractical.com/pipermail/rt-announce/2011-February/000186.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/65771 - http://openwall.com/lists/oss-security/2011/02/22/6 - http://www.vupen.com/english/advisories/2011/0475 - http://osvdb.org/71012 - https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
CVE ID: CVE-2011-1008 State: PUBLISHED Published: 2011-02-28T15:00:00 Last Updated: 2024-08-06T22:14:26.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Scrips_Overlay.pm in Best Practical Solutions RT before 3.8.9 does not properly restrict access to a TicketObj in a Scrip after a CurrentUser change, which allows remote authenticated users to obtain sensitive information via unspecified vectors, as demonstrated by custom-field value information, related to SQL logging. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/02/24/9 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65772 - http://openwall.com/lists/oss-
/oss-security/2011/02/24/9 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65772 - http://openwall.com/lists/oss-security/2011/02/23/22 - http://openwall.com/lists/oss-security/2011/02/24/7 - http://osvdb.org/71011 - http://openwall.com/lists/oss-security/2011/02/22/12 - http://openwall.com/lists/oss-security/2011/02/24/8 - http://secunia.com/advisories/43438 - http://openwall.com/lists/oss-security/2011/02/22/16 - https://github.com/bestpractical/rt/commit/2338cd19ed7a7f4c1e94f639ab2789d6586d01f3 - http://lists.bestpractical.com/pipermail/rt-announce/2011-February/000186.html - http://openwall.com/lists/oss-security/2011/02/22/6 - http://www.vupen.com/english/advisories/2011/0475 - h
00186.html - http://openwall.com/lists/oss-security/2011/02/22/6 - http://www.vupen.com/english/advisories/2011/0475 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=614576 - https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
CVE ID: CVE-2011-1009 State: PUBLISHED Published: 2020-02-05T20:41:55 Last Updated: 2024-08-06T22:14:26.930Z Vendors: Vanilla Products: Vanilla Forums Problem Types: Cross-Site Scripting Description: Vanilla Forums 2.0.17.1 through 2.0.17.5 has XSS in /vanilla/index.php via the p parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2011/02/22/14
CVE ID: CVE-2011-1010 State: PUBLISHED Published: 2011-03-01T22:00:00 Last Updated: 2024-08-06T22:14:26.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the mac_partition function in fs/partitions/mac.c in the Linux kernel before 2.6.37.2 allows local users to cause a denial of service (panic) or possibly have unspecified other impact via a malformed Mac OS partition table. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - http://securityreason.com/securityalert/8115 - http://openwall.com/lists/oss-security/2011/02/22/3 - https://exchange.xforc
p://securityreason.com/securityalert/8115 - http://openwall.com/lists/oss-security/2011/02/22/3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65643 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37.2 - https://bugzilla.redhat.com/show_bug.cgi?id=679282 - http://www.securityfocus.com/bid/46492 - http://openwall.com/lists/oss-security/2011/02/22/11 - http://www.securityfocus.com/archive/1/516615/100/0/threaded - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://openwall.com/lists/oss-security/2011/02/22/15 - http://www.securitytracker.com/id?1025126 - http://www.pre-cert.de/advisories/PRE-SA-2011-01.txt - http://git.kernel.org/?p=linux/kernel/git/torv
r.com/id?1025126 - http://www.pre-cert.de/advisories/PRE-SA-2011-01.txt - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fa7ea87a057958a8b7926c1a60a3ca6d696328ed
CVE ID: CVE-2011-1011 State: PUBLISHED Published: 2011-02-24T20:00:00 Last Updated: 2024-08-06T22:14:26.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: The seunshare_mount function in sandbox/seunshare.c in seunshare in certain Red Hat packages of policycoreutils 2.0.83 and earlier in Red Hat Enterprise Linux (RHEL) 6 and earlier, and Fedora 14 and earlier, mounts a new directory on top of /tmp without assigning root ownership and the sticky bit to this new directory, which allows local users to replace or delete arbitrary /tmp files, and consequently cause a denial of service or possibly gain privileges, by running a setuid application that relies on /tmp, as demonstrated by
a denial of service or possibly gain privileges, by running a setuid application that relies on /tmp, as demonstrated by the ksu application. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=633544 - http://secunia.com/advisories/44034 - http://archives.neohapsis.com/archives/fulldisclosure/2011-02/0585.html - http://www.securitytracker.com/id?1025291 - http://pkgs.fedoraproject.org/gitweb/?p=policycoreutils.git%3Ba=blob%3Bf=policycoreutils-rhat.patch%3Bh=d4db5bc06027de23d12a4b3f18fa6f9b1517df27%3Bhb=HEAD#l2197 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65641 - http://secunia.com/advisories/43844 - http://www.vupen.com/e
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/65641 - http://secunia.com/advisories/43844 - http://www.vupen.com/english/advisories/2011/0701 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056227.html - http://www.redhat.com/support/errata/RHSA-2011-0414.html - http://www.vupen.com/english/advisories/2011/0864 - http://www.securityfocus.com/bid/46510 - http://openwall.com/lists/oss-security/2011/02/23/1 - http://secunia.com/advisories/43415 - http://openwall.com/lists/oss-security/2011/02/23/2
CVE ID: CVE-2011-1012 State: PUBLISHED Published: 2011-03-01T22:00:00 Last Updated: 2024-08-06T22:14:27.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ldm_parse_vmdb function in fs/partitions/ldm.c in the Linux kernel before 2.6.38-rc6-git6 does not validate the VBLK size value in the VMDB structure in an LDM partition table, which allows local users to cause a denial of service (divide-by-zero error and OOPS) via a crafted partition table. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1146-1 - http://www.securitytracker.com/id?1025127 - http://www.securityfocus.com/bid/46512 - http://securityreason.com/securityalert/8115
.securitytracker.com/id?1025127 - http://www.securityfocus.com/bid/46512 - http://securityreason.com/securityalert/8115 - http://openwall.com/lists/oss-security/2011/02/23/4 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=294f6cf48666825d23c9372ef37631232746e40d - http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.38-rc6-git6.log - http://www.securityfocus.com/archive/1/516615/100/0/threaded - http://openwall.com/lists/oss-security/2011/02/23/21 - http://www.spinics.net/lists/mm-commits/msg82429.html - http://www.pre-cert.de/advisories/PRE-SA-2011-01.txt
CVE ID: CVE-2011-1013 State: PUBLISHED Published: 2011-05-09T19:00:00 Last Updated: 2024-08-06T22:14:27.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the drm_modeset_ctl function in (1) drivers/gpu/drm/drm_irq.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.38 and (2) sys/dev/pci/drm/drm_irq.c in the kernel in OpenBSD before 4.9 allows local users to trigger out-of-bounds write operations, and consequently cause a denial of service (system crash) or possibly have unspecified other impact, via a crafted num_crtcs (aka vb_num) structure member in an ioctl argument. Additional Analyst Notes: - CVE Program Container:
rafted num_crtcs (aka vb_num) structure member in an ioctl argument. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/67199 - http://www.securityfocus.com/bid/47639 - https://bugzilla.redhat.com/show_bug.cgi?id=679925 - http://www.openbsd.org/cgi-bin/cvsweb/src/sys/dev/pci/drm/drm_irq.c.diff?r1=1.41%3Br2=1.42%3Bf=h - http://www.openbsd.org/cgi-bin/cvsweb/src/sys/dev/pci/drm/drm_irq.c - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1922756124ddd53846877416d92ba4a802bc658f
CVE ID: CVE-2011-1014 State: REJECTED Published: 2017-07-21T19:00:00 Last Updated: 2017-07-21T18:57:01 Description: No description available.
CVE ID: CVE-2011-1015 State: PUBLISHED Published: 2011-05-09T22:00:00 Last Updated: 2024-08-06T22:14:27.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: The is_cgi method in CGIHTTPServer.py in the CGIHTTPServer module in Python 2.5, 2.6, and 3.0 allows remote attackers to read script source code via an HTTP GET request that lacks a / (slash) character at the beginning of the URI. Additional Analyst Notes: - CVE Program Container: References: - http://svn.python.org/view?view=revision&revision=71303 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:096 - https://bugzilla.redhat.com/show_bug.cgi?id=680094 - http://bugs.python.org/issue2254 - http://openwall.com/list
1:096 - https://bugzilla.redhat.com/show_bug.cgi?id=680094 - http://bugs.python.org/issue2254 - http://openwall.com/lists/oss-security/2011/02/24/10 - http://secunia.com/advisories/51040 - http://secunia.com/advisories/50858 - http://openwall.com/lists/oss-security/2011/02/23/27 - http://securitytracker.com/id?1025489 - http://www.ubuntu.com/usn/USN-1596-1 - http://hg.python.org/cpython/rev/c6c4398293bd/ - http://www.ubuntu.com/usn/USN-1613-2 - http://secunia.com/advisories/51024 - http://www.ubuntu.com/usn/USN-1613-1 - http://www.securityfocus.com/bid/46541
CVE ID: CVE-2011-1016 State: PUBLISHED Published: 2011-02-28T15:00:00 Last Updated: 2024-08-06T22:14:27.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Radeon GPU drivers in the Linux kernel before 2.6.38-rc5 do not properly validate data related to the AA resolve registers, which allows local users to write to arbitrary memory locations associated with (1) Video RAM (aka VRAM) or (2) the Graphics Translation Table (GTT) via crafted values. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/02/24/3 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.38-rc5 - https://exchange.xforce.ibmcloud.com/vuln
3 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.38-rc5 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65691 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fff1ce4dc6113b6fdc4e3a815ca5fd229408f8ef - http://openwall.com/lists/oss-security/2011/02/24/11 - https://bugzilla.redhat.com/show_bug.cgi?id=680000 - http://openwall.com/lists/oss-security/2011/02/25/4 - http://www.securityfocus.com/bid/46557
CVE ID: CVE-2011-1017 State: PUBLISHED Published: 2011-03-01T22:00:00 Last Updated: 2024-08-06T22:14:27.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the ldm_frag_add function in fs/partitions/ldm.c in the Linux kernel 2.6.37.2 and earlier might allow local users to gain privileges or obtain sensitive information via a crafted LDM partition table. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1146-1 - http://www.securityfocus.com/bid/46512 - http://securityreason.com/securityalert/8115 - http://openwall.com/lists/oss-security/2011/02/24/4 - http://securitytracker.com/id?1025128 - http://openwall.
rt/8115 - http://openwall.com/lists/oss-security/2011/02/24/4 - http://securitytracker.com/id?1025128 - http://openwall.com/lists/oss-security/2011/02/23/16 - http://www.securityfocus.com/archive/1/516615/100/0/threaded - http://secunia.com/advisories/43738 - http://openwall.com/lists/oss-security/2011/02/24/14 - http://www.pre-cert.de/advisories/PRE-SA-2011-01.txt - http://secunia.com/advisories/43716
CVE ID: CVE-2011-1018 State: PUBLISHED Published: 2011-02-25T18:00:00 Last Updated: 2024-08-06T22:14:27.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: logwatch.pl in Logwatch 7.3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in a log file name, as demonstrated via a crafted username to a Samba server. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/02/24/15 - http://sourceforge.net/tracker/?func=detail&aid=3184223&group_id=312875&atid=1316824 - http://www.vupen.com/english/advisories/2011/0581 - http://secunia.com/advisories/43495 - http://lists.fedoraproject.org/pipermail/pac
en.com/english/advisories/2011/0581 - http://secunia.com/advisories/43495 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055585.html - http://www.debian.org/security/2011/dsa-2182 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055617.html - http://secunia.com/advisories/43356 - http://www.vupen.com/english/advisories/2011/0533 - http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html - http://www.openwall.com/lists/oss-security/2011/02/24/13 - http://secunia.com/advisories/43644 - http://www.redhat.com/support/errata/RHSA-2011-0324.html - http://secunia.com/advisories/43622 - http://www.securityfocus.com/bid/46554 - http://lo
rt/errata/RHSA-2011-0324.html - http://secunia.com/advisories/43622 - http://www.securityfocus.com/bid/46554 - http://logwatch.svn.sourceforge.net/viewvc/logwatch/scripts/logwatch.pl?r1=3&r2=26&pathrev=26 - http://www.ubuntu.com/usn/USN-1078-1 - http://www.vupen.com/english/advisories/2011/0596 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055579.html - https://bugzilla.redhat.com/show_bug.cgi?id=680237 - http://sourceforge.net/mailarchive/forum.php?thread_name=4D604843.7040303%40mblmail.net&forum_name=logwatch-devel - http://secunia.com/advisories/43734 - http://www.securitytracker.com/id?1025165
CVE ID: CVE-2011-1019 State: PUBLISHED Published: 2013-03-01T11:00:00Z Last Updated: 2024-08-06T22:14:27.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dev_load function in net/core/dev.c in the Linux kernel before 2.6.38 allows local users to bypass an intended CAP_SYS_MODULE capability requirement and load arbitrary modules by leveraging the CAP_NET_ADMIN capability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/8909c9ad8ff03611c9c96c9a92656213e4bb495b - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8909c9ad8ff03611c9c96c9a92656213e4bb495b - https://bugzilla.redhat.com/show_bu
git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8909c9ad8ff03611c9c96c9a92656213e4bb495b - https://bugzilla.redhat.com/show_bug.cgi?id=680360 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38 - http://www.openwall.com/lists/oss-security/2011/02/25/1