Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-0893 State: PUBLISHED Published: 2011-04-03T01:00:00 Last Updated: 2024-08-06T22:05:54.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HP Operations 9.10 on UNIX platforms allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8174 - http://marc.info/?l=bugtraq&m=130166433409257&w=2 - http://www.vupen.com/english/advisories/2011/0837 - http://marc.info/?l=bugtraq&m=130166433409257&w=2 - http://secunia.com/advisories/43985 - http://www.securitytracker.com/id?1025281
CVE ID: CVE-2011-0894 State: PUBLISHED Published: 2011-04-03T01:00:00 Last Updated: 2024-08-06T22:05:54.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Operations 9.10 on UNIX platforms allows remote authenticated users to bypass intended access restrictions via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8174 - http://marc.info/?l=bugtraq&m=130166433409257&w=2 - http://www.vupen.com/english/advisories/2011/0837 - http://marc.info/?l=bugtraq&m=130166433409257&w=2 - http://secunia.com/advisories/43985 - http://www.securitytracker.com/id?1025281
CVE ID: CVE-2011-0895 State: PUBLISHED Published: 2011-04-06T17:00:00 Last Updated: 2024-08-06T22:05:54.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x and 8.1x allows remote authenticated users to obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/44032 - http://www.securityfocus.com/bid/47162 - http://securityreason.com/securityalert/8186 - http://marc.info/?l=bugtraq&m=130201751130787&w=2 - http://marc.info/?l=bugtraq&m=130201751130787&w=2 - http://www.securitytracker.com/id?1025288 - http://www.vupen.com/english/a
/marc.info/?l=bugtraq&m=130201751130787&w=2 - http://www.securitytracker.com/id?1025288 - http://www.vupen.com/english/advisories/2011/0871
CVE ID: CVE-2011-0896 State: PUBLISHED Published: 2011-04-15T00:00:00 Last Updated: 2024-08-06T22:05:54.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP NFS/ONCplus B.11.31.10 and earlier on HP-UX B.11.31 allows remote authenticated users to cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/47325 - http://secunia.com/advisories/44096 - http://securityreason.com/securityalert/8201 - http://marc.info/?l=bugtraq&m=130270782702556&w=2 - http://marc.info/?l=bugtraq&m=130270782702556&w=2 - http://www.vupen.com/english/advisories/2011/0935 - https://exchange.
ttp://marc.info/?l=bugtraq&m=130270782702556&w=2 - http://www.vupen.com/english/advisories/2011/0935 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66689 - http://www.securitytracker.com/id?1025326
CVE ID: CVE-2011-0897 State: PUBLISHED Published: 2011-04-15T00:00:00 Last Updated: 2024-08-06T22:05:54.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.00 allows local users to read arbitrary files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/71830 - http://securityreason.com/securityalert/8202 - http://marc.info/?l=bugtraq&m=130270893704066&w=2 - http://secunia.com/advisories/44185 - http://www.securityfocus.com/bid/47341 - http://marc.info/?l=bugtraq&m=130270893704066&w=2 - http://www.securitytracker.com/id?1025354 - https://exchange.xforce.ibmcloud.com/
nfo/?l=bugtraq&m=130270893704066&w=2 - http://www.securitytracker.com/id?1025354 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66707 - http://www.vupen.com/english/advisories/2011/0974
CVE ID: CVE-2011-0898 State: PUBLISHED Published: 2011-04-15T00:00:00 Last Updated: 2024-08-06T22:05:54.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 9.00 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8202 - http://marc.info/?l=bugtraq&m=130270893704066&w=2 - http://secunia.com/advisories/44185 - http://www.securityfocus.com/bid/47341 - http://osvdb.org/71831 - http://marc.info/?l=bugtraq&m=130270893704066&w=2 - http://www.securitytracker.com/id?1025354
http://osvdb.org/71831 - http://marc.info/?l=bugtraq&m=130270893704066&w=2 - http://www.securitytracker.com/id?1025354 - http://www.vupen.com/english/advisories/2011/0974 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66706
CVE ID: CVE-2011-0899 State: PUBLISHED Published: 2011-02-07T20:19:00 Last Updated: 2024-08-06T22:05:54.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AES encryption module 7.x-1.4 for Drupal leaves certain debugging code enabled in release, which records the plaintext password of the last logged-in user and allows remote attackers to gain privileges as that user. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/65112 - http://osvdb.org/70767 - http://secunia.com/advisories/43185 - http://drupal.org/node/1040728 - http://www.securityfocus.com/bid/46116 - http://drupal.org/node/1048998
CVE ID: CVE-2011-0900 State: PUBLISHED Published: 2011-02-07T20:19:00 Last Updated: 2024-08-06T22:05:54.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the tsc_launch_remote function (src/support.c) in Terminal Server Client (tsclient) 0.150, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a .RDP file with a long hostname argument. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43120 - http://www.exploit-db.com/exploits/16095 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65100 - http://www.securityfocus.com/bid/46099 - http://osvdb.org/70749
CVE ID: CVE-2011-0901 State: PUBLISHED Published: 2011-02-07T20:19:00 Last Updated: 2024-08-06T22:05:54.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the tsc_launch_remote function (src/support.c) in Terminal Server Client (tsclient) 0.150, and possibly other versions, allow user-assisted remote attackers to execute arbitrary code via a .RDP file with a long (1) username, (2) password, or (3) domain argument. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabili
ation. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/65101 - http://secunia.com/advisories/43120 - http://osvdb.org/70749 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65103 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65102
CVE ID: CVE-2011-0902 State: PUBLISHED Published: 2011-02-07T20:19:00 Last Updated: 2024-08-06T22:05:54.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple untrusted search path vulnerabilities in the Java Service in Sun Microsystems SunScreen Firewall on SunOS 5.9 allow local users to execute arbitrary code via a modified (1) PATH or (2) LD_LIBRARY_PATH environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/16041 - http://www.securityfocus.com/bid/45963 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64887
CVE ID: CVE-2011-0903 State: PUBLISHED Published: 2011-02-07T20:19:00 Last Updated: 2024-08-06T22:05:54.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in AR Web Content Manager (AWCM) 2.2 allow remote attackers to read arbitrary files and possibly have other unspecified impact via a .. (dot dot) in the (1) awcm_theme or (2) awcm_lang cookie to (a) index.php or (b) header.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46017 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64980 - http://www.exploit-db.com/exploits/16049
CVE ID: CVE-2011-0904 State: PUBLISHED Published: 2011-05-10T18:00:00 Last Updated: 2024-08-06T22:05:54.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3, 2.32.x before 2.32.2, 3.0.x before 3.0.2, and 3.1.x before 3.1.1, when raw encoding is used, allows remote authenticated users to cause a denial of service (daemon crash) via a large (1) X position or (2) Y position value in a framebuffer update request that triggers an out-of-bounds memory access, related to the rfbTranslateNone and rfbSendRectEncodingRaw functions. Additional Analyst Notes: - CVE Program Contain
s, related to the rfbTranslateNone and rfbSendRectEncodingRaw functions. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/67243 - http://git.gnome.org/browse/vino/commit/?id=0c2c9175963fc56bf2af10e42867181332f96ce0 - http://www.ubuntu.com/usn/usn-1128-1/ - http://git.gnome.org/browse/vino/commit/?id=d050a22b1c284b633c407ef92fde95c47e8fdb8a - http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:087 - http://rhn.redhat.com/errata/RHSA-2013-0169.html - http://secunia.com/advisories/44410 - http://ftp.gnome.org/pub/GNOME/sources/vino/2.32/vino-2
rata/RHSA-2013-0169.html - http://secunia.com/advisories/44410 - http://ftp.gnome.org/pub/GNOME/sources/vino/2.32/vino-2.32.2.news - http://www.vupen.com/english/advisories/2011/1144 - http://ftp.gnome.org/pub/GNOME/sources/vino/2.28/vino-2.28.3.news - http://www.securityfocus.com/bid/47681 - http://git.gnome.org/browse/vino/commit/?id=456dadbb5c5971d3448763a44c05b9ad033e522f - http://git.gnome.org/browse/vino/log/?h=gnome-2-30 - http://www.debian.org/security/2011/dsa-2238 - http://git.gnome.org/browse/vino/commit/?id=e17bd4e369f90748654e31a4867211dc7610975d - https://bugzilla.gnome.org/show_bug.cgi?id=641802 - http://git.gnome.org/browse/vino/commit/?id=dff52694a384fe95195f2211254026b752d6
illa.gnome.org/show_bug.cgi?id=641802 - http://git.gnome.org/browse/vino/commit/?id=dff52694a384fe95195f2211254026b752d63ec4 - https://bugzilla.redhat.com/show_bug.cgi?id=694455 - http://git.gnome.org/browse/vino/commit/?id=8beefcf7792d343c10c919ee0c928c81f73b1279 - http://secunia.com/advisories/44463 - http://ftp.gnome.org/pub/GNOME/sources/vino/3.0/vino-3.0.2.news - http://git.gnome.org/browse/vino/tree/NEWS
CVE ID: CVE-2011-0905 State: PUBLISHED Published: 2011-05-10T18:00:00 Last Updated: 2024-08-06T22:05:54.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3, 2.32.x before 2.32.2, 3.0.x before 3.0.2, and 3.1.x before 3.1.1, when tight encoding is used, allows remote authenticated users to cause a denial of service (daemon crash) via crafted dimensions in a framebuffer update request that triggers an out-of-bounds read operation. Additional Analyst Notes: - CVE Program Container: References: - http://git.gnome.org/browse/vino/commit/?id=0c2c9175963fc56bf2af10e4286718133
es: - CVE Program Container: References: - http://git.gnome.org/browse/vino/commit/?id=0c2c9175963fc56bf2af10e42867181332f96ce0 - http://www.ubuntu.com/usn/usn-1128-1/ - http://git.gnome.org/browse/vino/commit/?id=d050a22b1c284b633c407ef92fde95c47e8fdb8a - http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:087 - http://rhn.redhat.com/errata/RHSA-2013-0169.html - https://bugzilla.gnome.org/show_bug.cgi?id=641803 - http://secunia.com/advisories/44410 - http://ftp.gnome.org/pub/GNOME/sources/vino/2.32/vino-2.32.2.news - http://www.vupen.com/english/advisories/2011/1144 - https://exchange.xforce.ibmcloud.com/vu
vino/2.32/vino-2.32.2.news - http://www.vupen.com/english/advisories/2011/1144 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67244 - http://ftp.gnome.org/pub/GNOME/sources/vino/2.28/vino-2.28.3.news - http://www.securityfocus.com/bid/47681 - http://git.gnome.org/browse/vino/commit/?id=456dadbb5c5971d3448763a44c05b9ad033e522f - https://bugzilla.redhat.com/show_bug.cgi?id=694456 - http://git.gnome.org/browse/vino/log/?h=gnome-2-30 - http://www.debian.org/security/2011/dsa-2238 - http://git.gnome.org/browse/vino/commit/?id=e17bd4e369f90748654e31a4867211dc7610975d - http://git.gnome.org/browse/vino/commit/?id=dff52694a384fe95195f2211254026b752d63ec4 - http://git.gnome.org/browse/vino/co
tp://git.gnome.org/browse/vino/commit/?id=dff52694a384fe95195f2211254026b752d63ec4 - http://git.gnome.org/browse/vino/commit/?id=8beefcf7792d343c10c919ee0c928c81f73b1279 - http://secunia.com/advisories/44463 - http://ftp.gnome.org/pub/GNOME/sources/vino/3.0/vino-3.0.2.news - http://git.gnome.org/browse/vino/tree/NEWS
CVE ID: CVE-2011-0908 State: PUBLISHED Published: 2011-02-08T20:00:00Z Last Updated: 2024-09-16T16:17:51.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in Vanilla Forums before 2.0.17.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the Target parameter to an unspecified component, a different vulnerability than CVE-2011-0526. Additional Analyst Notes: - CVE Program Container: References: - http://www.vanillaforums.org/discussion/comment/134729/#Comment_134729
CVE ID: CVE-2011-0909 State: PUBLISHED Published: 2011-02-08T20:00:00Z Last Updated: 2024-09-17T04:09:23.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Vanilla Forums before 2.0.17.6 allows remote attackers to inject arbitrary web script or HTML via the p parameter to an unspecified component, a different vulnerability than CVE-2011-0526. Additional Analyst Notes: - CVE Program Container: References: - http://www.vanillaforums.org/discussion/comment/134729/#Comment_134729
CVE ID: CVE-2011-0910 State: PUBLISHED Published: 2011-02-08T20:00:00Z Last Updated: 2024-09-16T20:42:07.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cookie implementation in Vanilla Forums before 2.0.17.6 makes it easier for remote attackers to spoof signed requests, and consequently obtain access to arbitrary user accounts, via HMAC timing attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.vanillaforums.org/discussion/comment/134729/#Comment_134729
CVE ID: CVE-2011-0911 State: PUBLISHED Published: 2011-02-08T21:00:00Z Last Updated: 2024-09-16T19:40:10.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Users module in Zikula before 1.2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: it is possible that this overlaps CVE-2011-0535. Additional Analyst Notes: - CVE Program Container: References: - http://community.zikula.org/index.php?module=News&func=display&sid=3041&title=zikula-1.2.5-released
CVE ID: CVE-2011-0912 State: PUBLISHED Published: 2011-02-08T21:00:00 Last Updated: 2024-08-06T22:05:54.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in IBM Lotus Notes 8.0.x before 8.0.2 FP6 and 8.5.x before 8.5.1 FP5 allows remote attackers to execute arbitrary code via a cai:// URL containing a --launcher.library option that specifies a UNC share pathname for a DLL file, aka SPR PRAD82YJW2. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-11-051/ - http://secunia.com/advisories/43222 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14348 -
a.com/advisories/43222 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14348 - http://www.vupen.com/english/advisories/2011/0295 - http://www-01.ibm.com/support/docview.wss?uid=swg21461514
CVE ID: CVE-2011-0913 State: PUBLISHED Published: 2011-02-08T21:00:00 Last Updated: 2024-08-06T22:05:54.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a GIOP getEnvironmentString request, related to the local variable cache. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43208 - http://zerodayinitiative.com/advisories/ZDI-11-053/ - http://www-01.ibm.com/support/docview.wss?uid=swg21461514
CVE ID: CVE-2011-0914 State: PUBLISHED Published: 2011-02-08T21:00:00 Last Updated: 2024-08-06T22:05:54.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a GIOP client request, leading to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43208 - http://zerodayinitiative.com/advisories/ZDI-11-052/ - http://www-01.ibm.com/support/docview.wss?uid=swg21461514
CVE ID: CVE-2011-0915 State: PUBLISHED Published: 2011-02-08T21:00:00 Last Updated: 2024-08-06T22:05:54.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in nrouter.exe in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a long name parameter in a Content-Type header in a malformed Notes calendar (aka iCalendar or iCal) meeting request, aka SPR KLYH87LL23. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/516245/100/0/threaded - http://secunia.com/advisories/43208 - http://www-01.ibm.com/support/docview.wss?uid=swg21461514 - http://zerodayinitiative.com/advisorie
om/advisories/43208 - http://www-01.ibm.com/support/docview.wss?uid=swg21461514 - http://zerodayinitiative.com/advisories/ZDI-11-048/
CVE ID: CVE-2011-0916 State: PUBLISHED Published: 2011-02-08T21:00:00 Last Updated: 2024-08-06T22:05:54.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the SMTP service in IBM Lotus Domino allows remote attackers to execute arbitrary code via long arguments in a filename parameter in a malformed MIME e-mail message, aka SPR KLYH889M8H. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43247 - http://zerodayinitiative.com/advisories/ZDI-11-049/ - http://www-01.ibm.com/support/docview.wss?uid=swg21461514
CVE ID: CVE-2011-0917 State: PUBLISHED Published: 2011-02-08T21:00:00 Last Updated: 2024-08-06T22:05:54.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in nLDAP.exe in IBM Lotus Domino allows remote attackers to execute arbitrary code via a long string in an LDAP Bind operation, aka SPR KLYH87LMVX. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-11-047/ - http://secunia.com/advisories/43224 - http://www-01.ibm.com/support/docview.wss?uid=swg21461514 - http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=23&Itemid=23 - http://www.exploit-db.com/exploits/16190/
CVE ID: CVE-2011-0918 State: PUBLISHED Published: 2011-02-08T21:00:00 Last Updated: 2024-08-06T22:05:54.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the NRouter (aka Router) service in IBM Lotus Domino allows remote attackers to execute arbitrary code via long filenames associated with Content-ID and ATTACH:CID headers in attachments in malformed calendar-request e-mail messages, aka SPR KLYH87LKRE. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43224 - http://zerodayinitiative.com/advisories/ZDI-11-046/ - http://www-01.ibm.com/support/docview.wss?uid=swg21461514
CVE ID: CVE-2011-0919 State: PUBLISHED Published: 2011-02-08T21:00:00 Last Updated: 2024-08-06T22:05:54.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the (1) POP3 and (2) IMAP services in IBM Lotus Domino allow remote attackers to execute arbitrary code via non-printable characters in an envelope sender address, aka SPR KLYH87LLVJ. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43224 - http://www-01.ibm.com/support/docview.wss?uid=swg21461514 - http://zerodayinitiative.com/advisories/ZDI-11-045/ - http://www.securityfocus.com/archive/1/516232/100/0/threaded
CVE ID: CVE-2011-0920 State: PUBLISHED Published: 2011-02-08T21:00:00Z Last Updated: 2024-09-17T00:02:28.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Remote Console in IBM Lotus Domino, when a certain unsupported configuration involving UNC share pathnames is used, allows remote attackers to bypass authentication and execute arbitrary code via unspecified vectors, aka SPR PRAD89WGRS. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21461514
CVE ID: CVE-2011-0921 State: PUBLISHED Published: 2011-02-09T00:00:00 Last Updated: 2024-08-06T22:05:54.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: crs.exe in the Cell Manager Service in the client in HP Data Protector does not properly validate credentials associated with the hostname, domain, and username, which allows remote attackers to execute arbitrary code by sending unspecified data over TCP, related to the webreporting client, the applet domain, and the java username. Additional Analyst Notes: - CVE Program Container: References: - http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-hp - http://marc.info/?l=bugtraq&m=130391284726795&w=2 - http://www.vup
.tippingpoint.com/blog/2011/02/07/zdi-disclosure-hp - http://marc.info/?l=bugtraq&m=130391284726795&w=2 - http://www.vupen.com/english/advisories/2011/0308 - http://marc.info/?l=bugtraq&m=130391284726795&w=2 - http://zerodayinitiative.com/advisories/ZDI-11-057/ - http://www.securityfocus.com/bid/46234
CVE ID: CVE-2011-0922 State: PUBLISHED Published: 2011-02-09T00:00:00 Last Updated: 2024-08-06T22:05:54.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: The client in HP Data Protector allows remote attackers to execute arbitrary programs via an EXEC_SETUP command that references a UNC share pathname. Additional Analyst Notes: - CVE Program Container: References: - http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-hp - http://marc.info/?l=bugtraq&m=130391284726795&w=2 - http://zerodayinitiative.com/advisories/ZDI-11-056/ - http://www.vupen.com/english/advisories/2011/0308 - http://marc.info/?l=bugtraq&m=130391284726795&w=2 - http://www.securityfocus.com/bid/46234 -
lish/advisories/2011/0308 - http://marc.info/?l=bugtraq&m=130391284726795&w=2 - http://www.securityfocus.com/bid/46234 - http://www.securityfocus.com/archive/1/516272/100/0/threaded
CVE ID: CVE-2011-0923 State: PUBLISHED Published: 2011-02-09T00:00:00 Last Updated: 2024-08-06T22:05:54.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: The client in HP Data Protector does not properly validate EXEC_CMD arguments, which allows remote attackers to execute arbitrary Perl code via a crafted command, related to the "local bin directory." Additional Analyst Notes: - CVE Program Container: References: - http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-hp - http://marc.info/?l=bugtraq&m=130391284726795&w=2 - http://securityreason.com/securityalert/8261 - http://www.vupen.com/english/advisories/2011/0308 - http://marc.info/?l=bugtraq&m=130391284726795&w=