Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-0384 State: PUBLISHED Published: 2012-03-29T10:00:00 Last Updated: 2024-08-06T18:23:31.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS before 3.1.2S, 3.2.xS through 3.4.xS before 3.4.2S, 3.5.xS before 3.5.1S, and 3.1.xSG and 3.2.xSG before 3.2.2SG, when AAA authorization is enabled, allow remote authenticated users to bypass intended access restrictions and execute commands via a (1) HTTP or (2) HTTPS session, aka Bug ID CSCtr91106. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/80704 - http://tools.cisco.com/security/center/content/C
Notes: - CVE Program Container: References: - http://osvdb.org/80704 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-pai - http://www.securitytracker.com/id?1026860 - http://secunia.com/advisories/48614 - http://www.securityfocus.com/bid/52755
CVE ID: CVE-2012-0385 State: PUBLISHED Published: 2012-03-29T10:00:00 Last Updated: 2024-08-06T18:23:31.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Smart Install feature in Cisco IOS 12.2, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (device reload) by sending a malformed Smart Install message over TCP, aka Bug ID CSCtt16051. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48610 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-smartinstall - https://exchange.xforce.ibmcloud.com/vulnerabilities/74430 - http://www.securitytracker.com/id?1026867 - http://ww
all - https://exchange.xforce.ibmcloud.com/vulnerabilities/74430 - http://www.securitytracker.com/id?1026867 - http://www.securityfocus.com/bid/52756 - http://osvdb.org/80694
CVE ID: CVE-2012-0386 State: PUBLISHED Published: 2012-03-29T10:00:00 Last Updated: 2024-08-06T18:23:31.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSHv2 implementation in Cisco IOS 12.2, 12.4, 15.0, 15.1, and 15.2 and IOS XE 2.3.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.2S allows remote attackers to cause a denial of service (device reload) via a crafted username in a reverse SSH login attempt, aka Bug ID CSCtr49064. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1026866 - http://secunia.com/advisories/48609 - http://secunia.com/advisories/48641 - http://osvdb.org/80695 - http://www.securityfocus.com/bid/
.com/advisories/48609 - http://secunia.com/advisories/48641 - http://osvdb.org/80695 - http://www.securityfocus.com/bid/52752 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-ssh - https://exchange.xforce.ibmcloud.com/vulnerabilities/74404
CVE ID: CVE-2012-0387 State: PUBLISHED Published: 2012-03-29T10:00:00 Last Updated: 2024-08-06T18:23:30.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the HTTP Inspection Engine feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted transit HTTP traffic, aka Bug ID CSCtq36153. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52753 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-zbfw - https://exchange.xforce.ibmcloud.com/vulnerabilities/74435 - http:/
ntent/CiscoSecurityAdvisory/cisco-sa-20120328-zbfw - https://exchange.xforce.ibmcloud.com/vulnerabilities/74435 - http://secunia.com/advisories/48608 - http://www.securitytracker.com/id?1026861 - http://osvdb.org/80697
CVE ID: CVE-2012-0388 State: PUBLISHED Published: 2012-03-29T10:00:00 Last Updated: 2024-08-06T18:23:31.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the H.323 inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (memory consumption or device reload) via malformed transit H.323 traffic, aka Bug ID CSCtq45553. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52753 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-zbfw - http://secunia.com/advisories/48608 - https://exchange.xforce.ibmcloud
nt/CiscoSecurityAdvisory/cisco-sa-20120328-zbfw - http://secunia.com/advisories/48608 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74436 - http://www.securitytracker.com/id?1026861
CVE ID: CVE-2012-0389 State: PUBLISHED Published: 2012-01-24T18:00:00 Last Updated: 2024-08-06T18:23:30.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ForgottenPassword.aspx in MailEnable Professional, Enterprise, and Premium 4.26 and earlier, 5.x before 5.53, and 6.x before 6.03 allows remote attackers to inject arbitrary web script or HTML via the Username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47518 - http://www.securitytracker.com/id?1026519 - http://www.securityfocus.com/bid/51401 - http://archives.neohapsis.com/archives/bugtraq/2012-01/0090.html - http://osvdb
http://www.securityfocus.com/bid/51401 - http://archives.neohapsis.com/archives/bugtraq/2012-01/0090.html - http://osvdb.org/78242 - http://www.nerv.fi/CVE-2012-0389.txt - http://www.mailenable.com/kb/Content/Article.asp?ID=me020567 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72380 - http://secunia.com/advisories/47562 - http://www.exploit-db.com/exploits/18447
CVE ID: CVE-2012-0390 State: PUBLISHED Published: 2012-01-06T01:00:00 Last Updated: 2024-08-06T18:23:31.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DTLS implementation in GnuTLS 3.0.10 and earlier executes certain error-handling code only if there is a specific relationship between a padding length and the ciphertext size, which makes it easier for remote attackers to recover partial plaintext via a timing side-channel attack, a related issue to CVE-2011-4108. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/57260 - http://www.isg.rhul.ac.uk/~kp/dtls.pdf - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg000
ies/57260 - http://www.isg.rhul.ac.uk/~kp/dtls.pdf - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html
CVE ID: CVE-2012-0391 State: PUBLISHED Published: 2012-01-08T15:00:00.000Z Last Updated: 2025-10-22T00:05:48.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during certain exception handling for mismatched data types of properties, which allows remote attackers to execute arbitrary Java code via a crafted parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.exploit-db.com/exploits/18329 - http://archives.neohapsis.com/archives/bugtraq/2012-01/0031.html - http://struts.apache.org/2.x/docs/version-notes-2311.
http://archives.neohapsis.com/archives/bugtraq/2012-01/0031.html - http://struts.apache.org/2.x/docs/version-notes-2311.html - http://struts.apache.org/2.x/docs/s2-008.html - https://www.sec-consult.com/files/20120104-0_Apache_Struts2_Multiple_Critical_Vulnerabilities.txt - https://issues.apache.org/jira/browse/WW-3668 - http://secunia.com/advisories/47393
CVE ID: CVE-2012-0392 State: PUBLISHED Published: 2012-01-08T15:00:00Z Last Updated: 2024-09-16T22:20:33.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CookieInterceptor component in Apache Struts before 2.3.1.1 does not use the parameter-name whitelist, which allows remote attackers to execute arbitrary commands via a crafted HTTP Cookie header that triggers Java code execution through a static method. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18329 - http://archives.neohapsis.com/archives/bugtraq/2012-01/0031.html - http://struts.apache.org/2.x/docs/version-notes-2311.html - http://struts.apache.org/2.x/docs/s2-
aq/2012-01/0031.html - http://struts.apache.org/2.x/docs/version-notes-2311.html - http://struts.apache.org/2.x/docs/s2-008.html - https://www.sec-consult.com/files/20120104-0_Apache_Struts2_Multiple_Critical_Vulnerabilities.txt - https://lists.immunityinc.com/pipermail/dailydave/2012-January/000011.html - http://secunia.com/advisories/47393
CVE ID: CVE-2012-0393 State: PUBLISHED Published: 2012-01-08T15:00:00Z Last Updated: 2024-09-16T22:24:46.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ParameterInterceptor component in Apache Struts before 2.3.1.1 does not prevent access to public constructors, which allows remote attackers to create or overwrite arbitrary files via a crafted parameter that triggers the creation of a Java object. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18329 - http://archives.neohapsis.com/archives/bugtraq/2012-01/0031.html - http://struts.apache.org/2.x/docs/version-notes-2311.html - http://struts.apache.org/2.x/docs/s2-008.ht
2-01/0031.html - http://struts.apache.org/2.x/docs/version-notes-2311.html - http://struts.apache.org/2.x/docs/s2-008.html - https://www.sec-consult.com/files/20120104-0_Apache_Struts2_Multiple_Critical_Vulnerabilities.txt - http://secunia.com/advisories/47393
CVE ID: CVE-2012-0394 State: PUBLISHED Published: 2012-01-08T15:00:00 Last Updated: 2024-08-06T18:23:30.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DebuggingInterceptor component in Apache Struts before 2.3.1.1, when developer mode is used, allows remote attackers to execute arbitrary commands via unspecified vectors. NOTE: the vendor characterizes this behavior as not "a security vulnerability itself. Additional Analyst Notes: - CVE Program Container: References: - http://struts.apache.org/2.x/docs/version-notes-2311.html - http://struts.apache.org/2.x/docs/s2-008.html - http://www.exploit-db.com/exploits/18329 - http://archives.neohapsis.com/archives/bugtraq/2012-01
2.x/docs/s2-008.html - http://www.exploit-db.com/exploits/18329 - http://archives.neohapsis.com/archives/bugtraq/2012-01/0031.html - http://www.exploit-db.com/exploits/31434 - https://www.sec-consult.com/files/20120104-0_Apache_Struts2_Multiple_Critical_Vulnerabilities.txt - http://www.osvdb.org/78276
CVE ID: CVE-2012-0395 State: PUBLISHED Published: 2012-01-27T00:00:00Z Last Updated: 2024-09-17T04:19:22.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the server in EMC NetWorker 7.5.x and 7.6.x before 7.6.3 SP1 Cumulative Release build 851 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/521374
CVE ID: CVE-2012-0396 State: PUBLISHED Published: 2012-02-06T20:00:00 Last Updated: 2024-08-06T18:23:31.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Documentum xPlore 1.0, 1.1 before P07, and 1.2 does not properly enforce the requirement for BROWSE permission, which allows remote authenticated users to determine the existence of an object, or read object metadata, via a search. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51863 - http://securitytracker.com/id?1026639 - http://archives.neohapsis.com/archives/bugtraq/2012-02/0020.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/72994 - http://secunia.com/adv
archives/bugtraq/2012-02/0020.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/72994 - http://secunia.com/advisories/47920
CVE ID: CVE-2012-0397 State: PUBLISHED Published: 2012-03-06T23:00:00Z Last Updated: 2024-09-17T03:23:17.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in EMC RSA SecurID Software Token Converter before 2.6.1 allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/521885
CVE ID: CVE-2012-0398 State: PUBLISHED Published: 2012-03-15T00:00:00Z Last Updated: 2024-09-16T23:46:07.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Documentum eRoom before 7.4.4 does not properly validate session cookies, which allows remote attackers to hijack or replay sessions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-03/0057.html
CVE ID: CVE-2012-0399 State: PUBLISHED Published: 2012-03-20T15:00:00 Last Updated: 2024-08-06T18:23:30.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA enVision 4.x before 4.1 Patch 4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52557 - http://secunia.com/advisories/48484 - http://www.securitytracker.com/id?1026819 - http://osvdb.org/80206 - http://archives.neohapsis.com/archives/bugtraq/2012-03/0081.html
CVE ID: CVE-2012-0400 State: PUBLISHED Published: 2012-03-20T15:00:00 Last Updated: 2024-08-06T18:23:31.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RSA enVision 4.x before 4.1 Patch 4 does not properly restrict the number of failed authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52557 - http://secunia.com/advisories/48484 - http://www.securitytracker.com/id?1026819 - http://osvdb.org/80207 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74140 - http://archives.neohapsis.com/archives/bugtraq/2012-03/0081
https://exchange.xforce.ibmcloud.com/vulnerabilities/74140 - http://archives.neohapsis.com/archives/bugtraq/2012-03/0081.html
CVE ID: CVE-2012-0401 State: PUBLISHED Published: 2012-03-20T15:00:00 Last Updated: 2024-08-06T18:23:31.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in EMC RSA enVision 4.x before 4.1 Patch 4 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52557 - http://secunia.com/advisories/48484 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74137 - http://www.securitytracker.com/id?1026819 - http://archives.neohapsis.com/archives/bugtraq/2012-03/0081.html
CVE ID: CVE-2012-0402 State: PUBLISHED Published: 2012-03-20T15:00:00 Last Updated: 2024-08-06T18:23:31.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RSA enVision 4.x before 4.1 Patch 4 uses unspecified hardcoded credentials, which makes it easier for remote attackers to obtain access via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52557 - http://secunia.com/advisories/48484 - http://www.securitytracker.com/id?1026819 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74138 - http://archives.neohapsis.com/archives/bugtraq/2012-03/0081.html
CVE ID: CVE-2012-0403 State: PUBLISHED Published: 2012-03-20T15:00:00 Last Updated: 2024-08-06T18:23:31.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in EMC RSA enVision 4.x before 4.1 Patch 4 allows remote authenticated users to have an unspecified impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52557 - http://osvdb.org/80210 - http://secunia.com/advisories/48484 - http://www.securitytracker.com/id?1026819 - http://archives.neohapsis.com/archives/bugtraq/2012-03/0081.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/74139
CVE ID: CVE-2012-0404 State: PUBLISHED Published: 2012-03-15T00:00:00Z Last Updated: 2024-09-16T20:07:49.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in EMC Documentum eRoom before 7.4.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-03/0057.html
CVE ID: CVE-2012-0405 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-0406 State: PUBLISHED Published: 2012-04-20T01:00:00 Last Updated: 2024-08-06T18:23:30.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DPA_Utilities.cProcessAuthenticationData function in EMC Data Protection Advisor (DPA) 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an AUTHENTICATECONNECTION command that (1) lacks a password field or (2) has an empty password. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/522408/30/0/threaded - http://www.exploit-db.com/exploits/18688/ - http://www.securitytracker.com/id?1026956 - http://al
522408/30/0/threaded - http://www.exploit-db.com/exploits/18688/ - http://www.securitytracker.com/id?1026956 - http://aluigi.altervista.org/adv/dpa_1-adv.txt
CVE ID: CVE-2012-0407 State: PUBLISHED Published: 2012-04-20T01:00:00 Last Updated: 2024-08-06T18:23:31.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the DPA_Utilities library in EMC Data Protection Advisor (DPA) 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service (infinite loop) via a negative 64-bit value in a certain size field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/522408/30/0/threaded - http://www.exploit-db.com/exploits/18688/ - http://www.securitytracker.com/id?1026956 - http://aluigi.altervista.org/adv/dpa_1-adv.txt
CVE ID: CVE-2012-0408 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-0409 State: PUBLISHED Published: 2012-06-01T20:00:00 Last Updated: 2024-08-06T18:23:30.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in EMC AutoStart 5.3.x and 5.4.x before 5.4.3 allow remote attackers to cause a denial of service (agent crash) or possibly execute arbitrary code via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53682 - http://www.securitytracker.com/id?1027100 - http://www.securityfocus.com/archive/1/522835
CVE ID: CVE-2012-0410 State: PUBLISHED Published: 2012-07-05T14:00:00 Last Updated: 2024-08-06T18:23:31.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in WebAccess in Novell GroupWise before 8.03 allows remote attackers to read arbitrary files via the User.interface parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027217 - https://bugzilla.novell.com/show_bug.cgi?id=712163 - http://www.novell.com/support/kb/doc.php?id=7000708
CVE ID: CVE-2012-0411 State: PUBLISHED Published: 2012-12-24T18:00:00Z Last Updated: 2024-09-16T19:56:58.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Novell iPrint Client before 5.82 allows remote attackers to execute arbitrary code via an op-client-interface-version action. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/kb/doc.php?id=7008708
CVE ID: CVE-2012-0414 State: PUBLISHED Published: 2013-12-02T02:00:00 Last Updated: 2024-08-06T18:23:31.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Spacewalk service in SUSE Manager 1.2 for SUSE Linux Enterprise (SLE) 11 SP1 allows remote attackers to inject arbitrary web script or HTML via an image name. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.novell.com/show_bug.cgi?id=761165 - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5145796.html - https://support.novell.com/security/cve/CVE-2012-0414.html
CVE ID: CVE-2012-0417 State: PUBLISHED Published: 2012-09-28T10:00:00 Last Updated: 2024-08-06T18:23:31.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.novell.com/show_bug.cgi?id=740041 - http://www.novell.com/support/kb/doc.php?id=7010770 - http://www.securitytracker.com/id?1027599 - http://download.novell.com/Download?buildid=O5hTjIiMdMo~
CVE ID: CVE-2012-0418 State: PUBLISHED Published: 2012-09-28T10:00:00 Last Updated: 2024-08-06T18:23:31.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the client in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 on Windows allows user-assisted remote attackers to execute arbitrary code via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/kb/doc.php?id=7010771 - http://www.securityfocus.com/bid/55729 - http://download.novell.com/Download?buildid=O5hTjIiMdMo~ - https://bugzilla.novell.com/show_bug.cgi?id=752521
CVE ID: CVE-2012-0419 State: PUBLISHED Published: 2012-09-28T10:00:00 Last Updated: 2024-08-06T18:23:31.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the agent HTTP interfaces in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 allows remote attackers to read arbitrary files via directory traversal sequences in a request. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.novell.com/show_bug.cgi?id=756330 - http://seclists.org/fulldisclosure/2012/Sep/161 - https://bugzilla.novell.com/show_bug.cgi?id=756924 - http://www.novell.com/support/kb/doc.php?id=7010772 - http://archives.neoha
bugzilla.novell.com/show_bug.cgi?id=756924 - http://www.novell.com/support/kb/doc.php?id=7010772 - http://archives.neohapsis.com/archives/bugtraq/2012-09/0106.html - http://download.novell.com/Download?buildid=O5hTjIiMdMo~
CVE ID: CVE-2012-0420 State: PUBLISHED Published: 2013-12-02T02:00:00 Last Updated: 2024-08-06T18:23:31.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: zypp-refresh-wrapper in SUSE Zypper before 1.3.20 and 1.6.x before 1.6.166 allows local users to create files in arbitrary directories, or possibly have unspecified other impact, via a pathname in the ZYPP_LOCKFILE_ROOT environment variable. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.novell.com/show_bug.cgi?id=770630 - https://support.novell.com/security/cve/CVE-2012-0420.html
CVE ID: CVE-2012-0421 State: PUBLISHED Published: 2012-08-08T10:00:00Z Last Updated: 2024-09-16T18:19:37.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SUSE Audit Log Keeper daemon before 0.2.1-0.4.6.1 for SUSE Manager and Spacewalk uses world-readable permissions for /etc/auditlog-keeper.conf, which allows local users to obtain passwords by reading this file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00001.html - https://bugzilla.novell.com/771335