Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-4248 State: PUBLISHED Published: 2013-08-18T01:00:00 Last Updated: 2024-08-06T16:38:01.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: The openssl_x509_parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x before 5.5.2 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54657 - http://www.debia
Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54657 - http://www.debian.org/security/2013/dsa-2742 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00126.html - http://www.securityfocus.com/bid/61776 - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=2874696a5a8d46639d261571f915c493cd875897 - http://secunia.com/advisories/59652 - http://secunia.com/advisories/55078 - http://marc.info/?l=bugtraq&m=141390017113542&w=2 - http://support.apple.com/kb/HT6150 - http://www.ubuntu.com/usn/USN-1937-1 - http://www.php.net/ChangeLog-5.php - http://secunia.com/advisories/54478 - http://rhn.redhat.com/errata/RHSA-2013-1307.html - http://www.security
Log-5.php - http://secunia.com/advisories/54478 - http://rhn.redhat.com/errata/RHSA-2013-1307.html - http://www.securitytracker.com/id/1028924 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00125.html - http://rhn.redhat.com/errata/RHSA-2013-1615.html
CVE ID: CVE-2013-4249 State: PUBLISHED Published: 2013-10-04T17:00:00 Last Updated: 2024-08-06T16:38:01.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the AdminURLFieldWidget widget in contrib/admin/widgets.py in Django 1.5.x before 1.5.2 and 1.6.x before 1.6 beta 2 allows remote attackers to inject arbitrary web script or HTML via a URLField. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1028915 - http://secunia.com/advisories/54476 - http://seclists.org/oss-sec/2013/q3/369 - https://github.com/django/django/commit/90363e388c61874add3f3557ee654a996ec75d78 - https://exchange.xfor
c/2013/q3/369 - https://github.com/django/django/commit/90363e388c61874add3f3557ee654a996ec75d78 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86438 - https://www.djangoproject.com/weblog/2013/aug/13/security-releases-issued - https://github.com/django/django/commit/cbe6d5568f4f5053ed7228ca3c3d0cce77cf9560 - http://seclists.org/oss-sec/2013/q3/411
CVE ID: CVE-2013-4250 State: PUBLISHED Published: 2014-05-20T14:00:00 Last Updated: 2024-08-06T16:38:01.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) file upload component and (2) File Abstraction Layer (FAL) in TYPO3 6.0.x before 6.0.8 and 6.1.x before 6.1.3 do not properly check file extensions, which allow remote authenticated editors to execute arbitrary PHP code by uploading a .php file. Additional Analyst Notes: - CVE Program Container: References: - https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-002/
CVE ID: CVE-2013-4251 State: PUBLISHED Published: 2019-11-04T19:21:42 Last Updated: 2024-08-06T16:38:01.948Z Vendors: SciPy Products: SciPy Problem Types: /tmp and current directory issues Description: The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-4251 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4251 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-4251 - https://access.redhat.com/security/cve/cve-2013-4251 - http://lists.fedoraproject.org/pipermail/package-announce/2013-November/120696.html - http://lists.fedoraprojec
3-4251 - http://lists.fedoraproject.org/pipermail/package-announce/2013-November/120696.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119759.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119771.html - http://www.securityfocus.com/bid/63008 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88052 - https://github.com/scipy/scipy/commit/bd296e0336420b840fcd2faabb97084fd252a973
CVE ID: CVE-2013-4252 State: REJECTED Published: 2022-06-30T18:45:17 Last Updated: 2022-06-30T18:45:17 Description: No description available.
CVE ID: CVE-2013-4253 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-09T15:12:23.342Z Vendors: n/a Products: Red Hat Openshift Problem Types: CWE-377 Description: The deployment script in the unsupported "OpenShift Extras" set of add-on scripts, in Red Hat Openshift 1, installs a default public key in the root user's authorized_keys file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.openwall.com/lists/oss-security/2014/06/05/19 - https://github.com/openshift/openshift-extras/blob/enterprise-2.0/README.md#security-notice
CVE ID: CVE-2013-4254 State: PUBLISHED Published: 2013-08-25T01:00:00 Last Updated: 2024-08-06T16:38:01.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: The validate_event function in arch/arm/kernel/perf_event.c in the Linux kernel before 3.10.8 on the ARM platform allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) by adding a hardware event to an event group led by a software event. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1970-1 - http://secunia.com/advisories/54494 - http://www.ubuntu.com/usn/USN-1975-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux
a.com/advisories/54494 - http://www.ubuntu.com/usn/USN-1975-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c95eb3184ea1a3a2551df57190c81da695e2144b - http://www.ubuntu.com/usn/USN-1971-1 - http://www.ubuntu.com/usn/USN-1968-1 - http://www.ubuntu.com/usn/USN-1969-1 - https://bugzilla.redhat.com/show_bug.cgi?id=998878 - http://www.ubuntu.com/usn/USN-1973-1 - https://github.com/torvalds/linux/commit/c95eb3184ea1a3a2551df57190c81da695e2144b - http://www.ubuntu.com/usn/USN-1974-1 - http://www.openwall.com/lists/oss-security/2013/08/16/6 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.8 - http://www.ubuntu.com/usn/USN-1972-1
CVE ID: CVE-2013-4255 State: PUBLISHED Published: 2013-10-11T22:00:00Z Last Updated: 2024-08-06T16:38:01.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: The policy definition evaluator in Condor 7.5.4, 8.0.0, and earlier does not properly handle attributes in a (1) PREEMPT, (2) SUSPEND, (3) CONTINUE, (4) WANT_VACATE, or (5) KILL policy that evaluate to an Unconfigured, Undefined, or Error state, which allows remote authenticated users to cause a denial of service (condor_startd exit) via a crafted job. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1172.html - https://htcondor-wiki.cs.wisc.edu/index.cgi/tktview?tn=1786
ences: - http://rhn.redhat.com/errata/RHSA-2013-1172.html - https://htcondor-wiki.cs.wisc.edu/index.cgi/tktview?tn=1786 - http://rhn.redhat.com/errata/RHSA-2013-1171.html - https://bugzilla.redhat.com/show_bug.cgi?id=919401 - https://htcondor-wiki.cs.wisc.edu/index.cgi/tktview?tn=3829
CVE ID: CVE-2013-4256 State: PUBLISHED Published: 2013-10-09T14:44:00 Last Updated: 2024-08-06T16:38:01.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based and heap-based buffer overflows in Network Audio System (NAS) 1.9.3 allow local users to cause a denial of service (crash) or possibly execute arbitrary code via the (1) display command argument to the ProcessCommandLine function in server/os/utils.c; (2) ResetHosts function in server/os/access.c; (3) open_unix_socket, (4) open_isc_local, (5) open_xsight_local, (6) open_att_local, or (7) open_att_svr4_local function in server/os/connection.c; the (8) AUDIOHOST environment variable to the CreateWellKnownSoc
open_att_svr4_local function in server/os/connection.c; the (8) AUDIOHOST environment variable to the CreateWellKnownSockets or (9) AmoebaTCPConnectorThread function in server/os/connection.c; or (10) unspecified vectors related to logging in the osLogMsg function in server/os/aulog.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/08/19/3 - http://radscan.com/pipermail/nas/2013-August/001270.html - http://www.openwall.com/lists/oss-security/2013/08/16/2 - http://sourceforge.net/p/nas/code/288 - http://www.debian.org/security/2013/dsa-2771 - http://www.securityfocus.com/bid/61848 - http://www.ubuntu.com/usn/USN-1986-1
CVE ID: CVE-2013-4257 State: REJECTED Published: 2013-10-09T14:44:00Z Last Updated: 2024-09-17T02:41:30.707Z Description: No description available.
CVE ID: CVE-2013-4258 State: PUBLISHED Published: 2013-10-09T14:44:00 Last Updated: 2024-08-06T16:38:01.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the osLogMsg function in server/os/aulog.c in Network Audio System (NAS) 1.9.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in unspecified vectors, related to syslog. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61852 - http://www.openwall.com/lists/oss-security/2013/08/19/3 - http://radscan.com/pipermail/nas/2013-August/001270.html - http://radscan.com/pipermail/n
ts/oss-security/2013/08/19/3 - http://radscan.com/pipermail/nas/2013-August/001270.html - http://radscan.com/pipermail/nas/2013-August/001277.html - http://www.openwall.com/lists/oss-security/2013/08/16/2 - http://www.debian.org/security/2013/dsa-2771 - http://sourceforge.net/mailarchive/forum.php?thread_name=E1Rp1rP-00038Z-VJ%40sfp-svn-6.v30.ch3.sourceforge.com&forum_name=nas-commits
CVE ID: CVE-2013-4259 State: PUBLISHED Published: 2013-09-16T19:00:00 Last Updated: 2024-08-06T16:38:01.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: runner/connection_plugins/ssh.py in Ansible before 1.2.3, when using ControlPersist, allows local users to redirect a ssh session via a symlink attack on a socket file with a predictable name in /tmp/. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=998223 - https://groups.google.com/forum/#%21topic/ansible-project/UVDYW0HGcNg - http://www.ansible.com/security
CVE ID: CVE-2013-4260 State: PUBLISHED Published: 2013-09-16T19:00:00 Last Updated: 2024-08-06T16:38:01.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/ansible/playbook/__init__.py in Ansible 1.2.x before 1.2.3, when playbook does not run due to an error, allows local users to overwrite arbitrary files via a symlink attack on a retry file with a predictable name in /var/tmp/ansible/. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/#%21topic/ansible-project/UVDYW0HGcNg - https://bugzilla.redhat.com/show_bug.cgi?id=998227 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86898 - http://www.ansible.com/security
CVE ID: CVE-2013-4261 State: PUBLISHED Published: 2013-10-29T22:00:00Z Last Updated: 2024-08-06T16:38:01.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly handle errors that occur during messaging, which allows remote attackers to cause a denial of service (connection pool consumption), as demonstrated using multiple requests that send long strings to an instance console and retrieving the console log. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2013/q3/595 - http://rhn.redhat.com/errata/RHSA-2013-1199.html - https
tainer: References: - http://seclists.org/oss-sec/2013/q3/595 - http://rhn.redhat.com/errata/RHSA-2013-1199.html - https://bugzilla.redhat.com/show_bug.cgi?id=999271 - https://bugs.launchpad.net/nova/+bug/1215091 - https://bugzilla.redhat.com/show_bug.cgi?id=999164
CVE ID: CVE-2013-4262 State: PUBLISHED Published: 2014-07-28T19:00:00 Last Updated: 2024-08-06T16:38:01.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: svnwcsub.py in Subversion 1.8.0 before 1.8.3, when using the --pidfile option and running in foreground mode, allows local users to gain privileges via a symlink attack on the pid file. NOTE: this issue was SPLIT due to different affected versions (ADT3). The irkerbridge.py issue is covered by CVE-2013-7393. Additional Analyst Notes: - CVE Program Container: References: - https://subversion.apache.org/security/CVE-2013-4262-advisory.txt - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2013-4263 State: PUBLISHED Published: 2013-11-23T17:00:00 Last Updated: 2024-08-06T16:38:01.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: libavfilter in FFmpeg before 2.0.1 has unspecified impact and remote vectors related to a crafted "plane," which triggers an out-of-bounds heap write. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FFmpeg/FFmpeg/commit/e43a0a232dbf6d3c161823c2e07c52e76227a1bc - http://www.openwall.com/lists/oss-security/2013/08/21/11 - http://www.ffmpeg.org/security.html - https://security.gentoo.org/glsa/201603-06
CVE ID: CVE-2013-4264 State: PUBLISHED Published: 2013-11-23T17:00:00 Last Updated: 2024-08-06T16:38:01.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kempf_decode_tile function in libavcodec/g2meet.c in FFmpeg before 2.0.1 allows remote attackers to cause a denial of service (out-of-bounds heap write) via a G2M4 encoded file. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/2842 - http://www.openwall.com/lists/oss-security/2013/08/21/11 - https://github.com/FFmpeg/FFmpeg/commit/2960576378d17d71cc8dccc926352ce568b5eec1 - http://www.ffmpeg.org/security.html - https://security.gentoo.org/glsa/201603-06
CVE ID: CVE-2013-4265 State: PUBLISHED Published: 2013-11-23T17:00:00 Last Updated: 2024-08-06T16:38:01.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: The av_reallocp_array function in libavutil/mem.c in FFmpeg before 2.0.1 has an unspecified impact and remote vectors related to a "wrong return code" and a resultant NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/08/21/11 - http://www.ffmpeg.org/security.html - https://security.gentoo.org/glsa/201603-06 - https://github.com/FFmpeg/FFmpeg/commit/c94f9e854228e0ea00e1de8769d8d3f7cab84a55
CVE ID: CVE-2013-4266 State: REJECTED Published: 2013-08-27T01:00:00Z Last Updated: 2024-09-17T04:14:49.528Z Description: No description available.
CVE ID: CVE-2013-4267 State: PUBLISHED Published: 2020-02-11T03:58:09 Last Updated: 2024-08-06T16:38:01.841Z Vendors: n/a Products: Ajaxeplorer Problem Types: Metacharacters Description: Ajaxeplorer before 5.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) archive_name parameter to the Power FS module (plugins/action.powerfs/class.PowerFSController.php), a (2) file name to the getTrustSizeOnFileSystem function in the File System (Standard) module (plugins/access.fs/class.fsAccessWrapper.php), or the (3) revision parameter to the Subversion Repository module (plugins/meta.svn/class.SvnManager.php). Additional Analyst Notes: - CVE Program Container:
Subversion Repository module (plugins/meta.svn/class.SvnManager.php). Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/08/21/16 - https://github.com/pydio/pydio-core/commit/22a62840e5ac14bb389 - https://www.tenable.com/plugins/nessus/70495
CVE ID: CVE-2013-4268 State: REJECTED Published: 2020-02-11T04:11:04 Last Updated: 2020-02-11T04:11:04 Description: No description available.
CVE ID: CVE-2013-4269 State: REJECTED Published: 2020-02-11T04:10:34 Last Updated: 2020-02-11T04:10:34 Description: No description available.
CVE ID: CVE-2013-4270 State: PUBLISHED Published: 2013-12-09T18:00:00 Last Updated: 2024-08-06T16:38:01.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: The net_ctl_permissions function in net/sysctl_net.c in the Linux kernel before 3.11.5 does not properly determine uid and gid values, which allows local users to bypass intended /proc/sys/net restrictions via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1027752 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.11.5 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2433c8f094a008895e66f25bd1773cdb01c91
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2433c8f094a008895e66f25bd1773cdb01c91d01 - https://github.com/torvalds/linux/commit/2433c8f094a008895e66f25bd1773cdb01c91d01 - http://www.ubuntu.com/usn/USN-2049-1 - http://rhn.redhat.com/errata/RHSA-2014-0100.html
CVE ID: CVE-2013-4271 State: PUBLISHED Published: 2013-10-10T00:00:00 Last Updated: 2024-08-06T16:38:01.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources, which allows remote attackers to execute arbitrary Java code via a serialized object, a different vulnerability than CVE-2013-4221. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1862.html - https://github.com/restlet/restlet-framework-java/issues/778 - http://restlet.org/learn/2.1/changes - https://bugzilla.redhat.com/show_bug.cgi?id=999735 -
framework-java/issues/778 - http://restlet.org/learn/2.1/changes - https://bugzilla.redhat.com/show_bug.cgi?id=999735 - http://rhn.redhat.com/errata/RHSA-2013-1410.html
CVE ID: CVE-2013-4272 State: PUBLISHED Published: 2013-08-28T15:00:00Z Last Updated: 2024-09-17T03:14:31.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BOTCHA Spam Prevention module 7.x-1.x before 7.x-1.6, 7.x-2.x before 7.x-2.1, and 7.x-3.x before 7.x-3.3 for Drupal, when the debugging level is set to 5 or 6, logs the content of submitted forms, which allows context-dependent users to obtain sensitive information such as usernames and passwords by reading the log file. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/2064785 - http://www.openwall.com/lists/oss-security/2013/08/22/2 - https://drupal.org/node/2064783 - https://drupa
node/2064785 - http://www.openwall.com/lists/oss-security/2013/08/22/2 - https://drupal.org/node/2064783 - https://drupal.org/node/2065057 - https://drupal.org/node/2064781
CVE ID: CVE-2013-4273 State: PUBLISHED Published: 2014-07-19T18:00:00 Last Updated: 2024-08-06T16:38:01.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Entity API module 7.x-1.x before 7.x-1.2 for Drupal does not properly restrict access to node comments, which allows remote authenticated users to read the comments via unspecified vectors. NOTE: this identifier was SPLIT per ADT5 due to different researcher organizations. CVE-2013-7391 was assigned for the View vector. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/08/22/2 - https://drupal.org/node/2065207 - https://drupal.org/node/2065197
CVE ID: CVE-2013-4274 State: PUBLISHED Published: 2013-08-28T15:00:00Z Last Updated: 2024-09-17T04:19:19.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the password_policy_admin_view function in password_policy.admin.inc in the Password Policy module 6.x-1.x before 6.x-1.6 and 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with the "Administer policies" permission to inject arbitrary web script or HTML via the "Password Expiration Warning" field to the admin/config/people/password_policy/add page. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/08
age. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/08/22/2 - http://www.securityfocus.com/bid/61780 - http://www.madirish.net/557 - https://drupal.org/node/2065387 - https://drupal.org/node/2065241
CVE ID: CVE-2013-4275 State: PUBLISHED Published: 2019-11-13T20:43:27 Last Updated: 2024-08-06T16:38:01.880Z Vendors: Zen Products: Zen theme Problem Types: Cross-Site Scripting Description: Cross-site scripting (XSS) vulnerability in the zen_breadcrumb function in template.php in the Zen theme 6.x-1.x, 7.x-3.x before 7.x-3.2, and 7.x-5.x before 7.x-5.4 for Drupal allows remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via the breadcrumb separator field. Additional Analyst Notes: - CVE Program Container: References: - http://www.madirish.net/?article=452 - https://drupal.org/node/2071157 - http://seclists.org/fulldisclosure/2013/Aug/22
http://www.madirish.net/?article=452 - https://drupal.org/node/2071157 - http://seclists.org/fulldisclosure/2013/Aug/226 - http://www.openwall.com/lists/oss-security/2013/08/22/2 - https://drupal.org/node/2071055 - https://drupal.org/node/2071065 - https://drupal.org/node/754000 - http://www.securityfocus.com/bid/61922
CVE ID: CVE-2013-4276 State: PUBLISHED Published: 2013-09-28T19:00:00 Last Updated: 2024-08-06T16:38:01.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in LittleCMS (aka lcms or liblcms) 1.19 and earlier allow remote attackers to cause a denial of service (crash) via a crafted (1) ICC color profile to the icctrans utility or (2) TIFF image to the tiffdiff utility. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3770-2/ - https://bugzilla.redhat.com/show_bug.cgi?id=992975 - http://www.securityfocus.com/bid/61607 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=718682 - http://lists.opensuse.org/ope
ww.securityfocus.com/bid/61607 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=718682 - http://lists.opensuse.org/opensuse-updates/2013-10/msg00029.html - https://bugzilla.redhat.com/show_bug.cgi?id=991757 - http://lists.opensuse.org/opensuse-updates/2013-10/msg00021.html - http://www.openwall.com/lists/oss-security/2013/08/22/3
CVE ID: CVE-2013-4277 State: PUBLISHED Published: 2013-09-16T19:00:00 Last Updated: 2024-08-06T16:38:01.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: Svnserve in Apache Subversion 1.4.0 through 1.7.12 and 1.8.0 through 1.8.1 allows local users to overwrite arbitrary files or kill arbitrary processes via a symlink attack on the file specified by the --pid-file option. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/86972 - http://www.securityfocus.com/bid/62266 - http://subversion.apache.org/security/CVE-2013-4277-advisory.txt - http://lists.opensuse.org/opensuse-updates/2013-09/msg00054.html - http://list
org/security/CVE-2013-4277-advisory.txt - http://lists.opensuse.org/opensuse-updates/2013-09/msg00054.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00031.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18554