Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-2166 State: PUBLISHED Published: 2011-05-24T23:00:00 Last Updated: 2024-08-06T22:53:17.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: script-login in Dovecot 2.0.x before 2.0.13 does not follow the user and group configuration settings, which might allow remote authenticated users to bypass intended access restrictions by leveraging a script. Additional Analyst Notes: - CVE Program Container: References: - http://www.dovecot.org/doc/NEWS-2.0 - http://dovecot.org/pipermail/dovecot/2011-May/059085.html - http://rhn.redhat.com/errata/RHSA-2013-0520.html - http://secunia.com/advisories/52311 - http://www.securityfocus.com/bid/48003 - http://openwall.com/lists/os
-0520.html - http://secunia.com/advisories/52311 - http://www.securityfocus.com/bid/48003 - http://openwall.com/lists/oss-security/2011/05/18/4 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67675
CVE ID: CVE-2011-2167 State: PUBLISHED Published: 2011-05-24T23:00:00 Last Updated: 2024-08-06T22:53:16.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: script-login in Dovecot 2.0.x before 2.0.13 does not follow the chroot configuration setting, which might allow remote authenticated users to conduct directory traversal attacks by leveraging a script. Additional Analyst Notes: - CVE Program Container: References: - http://www.dovecot.org/doc/NEWS-2.0 - http://dovecot.org/pipermail/dovecot/2011-May/059085.html - http://rhn.redhat.com/errata/RHSA-2013-0520.html - http://secunia.com/advisories/52311 - http://www.securityfocus.com/bid/48003 - http://openwall.com/lists/oss-securit
l - http://secunia.com/advisories/52311 - http://www.securityfocus.com/bid/48003 - http://openwall.com/lists/oss-security/2011/05/18/4 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67674
CVE ID: CVE-2011-2168 State: PUBLISHED Published: 2011-05-24T23:00:00 Last Updated: 2024-08-06T22:53:16.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the glob implementation in libc in OpenBSD before 4.9 might allow context-dependent attackers to have an unspecified impact via a crafted string, related to the GLOB_APPEND and GLOB_DOOFFS flags, a different issue than CVE-2011-0418. Additional Analyst Notes: - CVE Program Container: References: - http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gen/glob.c.diff?r1=1.34%3Br2=1.35%3Bf=h - http://www.securityfocus.com/bid/48004 - http://securityreason.com/achievement_securityalert/97 - http://www.o
5%3Bf=h - http://www.securityfocus.com/bid/48004 - http://securityreason.com/achievement_securityalert/97 - http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gen/glob.c#rev1.35
CVE ID: CVE-2011-2169 State: PUBLISHED Published: 2011-05-24T23:00:00Z Last Updated: 2024-09-16T23:26:27.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome OS before R12 0.12.433.38 Beta allows local users to gain privileges by creating a /var/lib/chromeos-aliases.conf file and placing commands in it. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2011/05/chrome-os-beta-channel-update_16.html
CVE ID: CVE-2011-2170 State: PUBLISHED Published: 2011-05-24T23:00:00Z Last Updated: 2024-09-16T23:47:05.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome OS before R12 0.12.433.38 Beta, when Guest mode is enabled, does not prevent changes on the about:flags page, which has unspecified impact and local attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2011/05/chrome-os-beta-channel-update_16.html
CVE ID: CVE-2011-2171 State: PUBLISHED Published: 2011-05-24T23:00:00Z Last Updated: 2024-09-16T22:25:47.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the dbugs package in Google Chrome OS before R12 0.12.433.38 Beta has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2011/05/chrome-os-beta-channel-update_16.html
CVE ID: CVE-2011-2172 State: PUBLISHED Published: 2011-05-26T16:00:00 Last Updated: 2024-08-06T22:53:17.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the search center in IBM WebSphere Portal 7.0.0.1 before CF004 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/72500 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM36644 - http://www.ibm.com/support/docview.wss?uid=swg24029452 - http://secunia.com/advisories/44700 - http://www.securityfocus.com/bid/47954 - http://www-01.ibm.com/support/docview.wss?uid=swg1P
unia.com/advisories/44700 - http://www.securityfocus.com/bid/47954 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM37009 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67594
CVE ID: CVE-2011-2173 State: PUBLISHED Published: 2011-05-26T16:00:00 Last Updated: 2024-08-06T22:53:17.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: The implementation of OutputMediator objects in IBM WebSphere Portal 6.0.1.7, and 7.0.0.1 before CF002, allows remote authenticated users to cause a denial of service (memory consumption) via requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg24029452 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67687 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM33432
CVE ID: CVE-2011-2174 State: PUBLISHED Published: 2011-06-06T19:00:00 Last Updated: 2024-08-06T22:53:16.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the tvb_uncompress function in epan/tvbuff.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service (application crash) via a packet with malformed data that uses zlib compression. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/44958 - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061437.html - https://bugzilla.redhat.com/show_bug.cgi?id=710097 - http://www.wireshark.org/secur
age-announce/2011-June/061437.html - https://bugzilla.redhat.com/show_bug.cgi?id=710097 - http://www.wireshark.org/security/wnpa-sec-2011-07.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5908 - http://secunia.com/advisories/48947 - http://www.securityfocus.com/bid/48066 - http://www.wireshark.org/security/wnpa-sec-2011-08.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14777 - http://www.debian.org/security/2011/dsa-2274 - http://secunia.com/advisories/44449 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=37081 - http://openwall.com/lists/oss-security/2011/06/01/11 - http://openwall.com/lists/oss-security/2011/06/01/1 -
on=37081 - http://openwall.com/lists/oss-security/2011/06/01/11 - http://openwall.com/lists/oss-security/2011/06/01/1 - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061290.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/67793 - http://openwall.com/lists/oss-security/2011/05/31/20 - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061477.html - http://secunia.com/advisories/45149
CVE ID: CVE-2011-2175 State: PUBLISHED Published: 2011-06-06T19:00:00 Last Updated: 2024-08-06T22:53:16.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in the visual_read function in wiretap/visual.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service (application crash) via a malformed Visual Networks file that triggers a heap-based buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - http://anonsvn.wireshark.org/viewvc?view=revision&revision=37128 - http://secunia.com/advisories/44958 - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061437.html - htt
p://secunia.com/advisories/44958 - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061437.html - http://www.wireshark.org/security/wnpa-sec-2011-07.html - http://rhn.redhat.com/errata/RHSA-2013-0125.html - http://secunia.com/advisories/48947 - http://www.securityfocus.com/bid/48066 - http://www.wireshark.org/security/wnpa-sec-2011-08.html - http://www.debian.org/security/2011/dsa-2274 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5934 - http://secunia.com/advisories/44449 - https://bugzilla.redhat.com/show_bug.cgi?id=710109 - http://openwall.com/lists/oss-security/2011/06/01/11 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%
lists/oss-security/2011/06/01/11 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14645 - http://openwall.com/lists/oss-security/2011/06/01/1 - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061290.html - http://openwall.com/lists/oss-security/2011/05/31/20 - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061477.html - http://secunia.com/advisories/45149
CVE ID: CVE-2011-2176 State: PUBLISHED Published: 2011-09-02T23:00:00 Last Updated: 2024-08-06T22:53:17.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNOME NetworkManager before 0.8.6 does not properly enforce the auth_admin element in PolicyKit, which allows local users to bypass intended wireless network sharing restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://cgit.freedesktop.org/NetworkManager/NetworkManager/plain/NEWS?h=NM_0_8 - http://securitytracker.com/id?1025711 - http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063665.html - http://www.redhat.com/support/errata/RHSA-2011-0930.html -
ect.org/pipermail/package-announce/2011-August/063665.html - http://www.redhat.com/support/errata/RHSA-2011-0930.html - https://bugzilla.redhat.com/show_bug.cgi?id=709662 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:171 - http://secunia.com/advisories/44858
CVE ID: CVE-2011-2177 State: PUBLISHED Published: 2019-11-27T16:42:39 Last Updated: 2024-08-06T22:53:16.906Z Vendors: OpenOffice.org Products: OpenOffice.org Problem Types: InteVyDis Demo of OpenOffice 0day. Released with VulnDisco 8.8 pack (release date May,2009) Description: OpenOffice.org v3.3 allows execution of arbitrary code with the privileges of the user running the OpenOffice.org suite tools. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2177 - https://access.redhat.com/security/cve/cve-2011-2177 - https://twitter.com/instasegv/status/75482755194032128 - https://www.openwall.com/lists/oss-security/2011/06/02/4
CVE ID: CVE-2011-2178 State: PUBLISHED Published: 2011-08-10T20:00:00Z Last Updated: 2024-08-06T22:53:17.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: The virSecurityManagerGetPrivateData function in security/security_manager.c in libvirt 0.8.8 through 0.9.1 uses the wrong argument for a sizeof call, which causes incorrect processing of "security manager private data" that "reopens disk probing" and might allow guest OS users to read arbitrary files on the host OS. NOTE: this vulnerability exists because of a CVE-2010-2238 regression. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=709775 - http://libvirt.org/news
tes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=709775 - http://libvirt.org/news.html - https://bugzilla.redhat.com/show_bug.cgi?id=709769 - http://lists.opensuse.org/opensuse-updates/2011-06/msg00030.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062515.html - https://www.redhat.com/archives/libvir-list/2011-May/msg01935.html - http://www.ubuntu.com/usn/USN-1152-1 - http://people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-2178.html
CVE ID: CVE-2011-2179 State: PUBLISHED Published: 2011-06-14T17:00:00 Last Updated: 2024-08-06T22:53:17.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in config.c in config.cgi in (1) Nagios 3.2.3 and (2) Icinga before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the expand parameter, as demonstrated by an (a) command action or a (b) hosts action. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2011-06/0018.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/67797 - http://securityreason.com/securityalert/8274 - http://www.sec
tps://exchange.xforce.ibmcloud.com/vulnerabilities/67797 - http://securityreason.com/securityalert/8274 - http://www.securityfocus.com/bid/48087 - https://bugzilla.redhat.com/show_bug.cgi?id=709871 - http://tracker.nagios.org/view.php?id=224 - http://www.openwall.com/lists/oss-security/2011/06/01/10 - http://www.rul3z.de/advisories/SSCHADV2011-006.txt - http://www.openwall.com/lists/oss-security/2011/06/02/6 - https://dev.icinga.org/issues/1605 - http://secunia.com/advisories/44974 - http://www.rul3z.de/advisories/SSCHADV2011-005.txt - http://www.ubuntu.com/usn/USN-1151-1 - http://archives.neohapsis.com/archives/bugtraq/2011-06/0017.html
CVE ID: CVE-2011-2180 State: PUBLISHED Published: 2011-06-29T17:00:00Z Last Updated: 2024-09-16T21:58:12.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in dereferer.php in A Really Simple Chat (ARSC) 3.3-rc2 allows remote attackers to inject arbitrary web script or HTML via the arsc_link parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/02/1 - http://www.openwall.com/lists/oss-security/2011/06/02/7 - http://www.htbridge.ch/advisory/xss_in_a_really_simple_chat_arsc.html
CVE ID: CVE-2011-2181 State: PUBLISHED Published: 2011-06-29T17:00:00Z Last Updated: 2024-09-16T21:56:58.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in A Really Simple Chat (ARSC) 3.3-rc2 allow remote attackers to execute arbitrary SQL commands via the (1) arsc_user parameter to base/admin/edit_user.php, (2) arsc_layout_id parameter in base/admin/edit_layout.php, or (3) arsc_room parameter to base/admin/edit_room.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.htbridge.ch/advisory/multiple_sql_injections_in_a_really_simple_chat_arsc.html - http://www.openwall.com/lists/oss-security/2011/06/02/1 - http
ltiple_sql_injections_in_a_really_simple_chat_arsc.html - http://www.openwall.com/lists/oss-security/2011/06/02/1 - http://www.openwall.com/lists/oss-security/2011/06/02/7
CVE ID: CVE-2011-2182 State: PUBLISHED Published: 2012-06-13T10:00:00 Last Updated: 2024-08-06T22:53:17.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ldm_frag_add function in fs/partitions/ldm.c in the Linux kernel before 2.6.39.1 does not properly handle memory allocation for non-initial fragments, which might allow local users to conduct buffer overflow attacks, and gain privileges or obtain sensitive information, via a crafted LDM partition table. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1017. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52334 - http://git.kernel.org/?p=linux/kernel
s: - CVE Program Container: References: - http://www.securityfocus.com/bid/52334 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=cae13fe4cc3f24820ffb990c09110626837e85d4 - https://github.com/torvalds/linux/commit/cae13fe4cc3f24820ffb990c09110626837e85d4 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39.1 - http://www.openwall.com/lists/oss-security/2011/06/05/1 - http://marc.info/?l=bugtraq&m=139447903326211&w=2
CVE ID: CVE-2011-2183 State: PUBLISHED Published: 2012-06-13T10:00:00Z Last Updated: 2024-08-06T22:53:17.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the scan_get_next_rmap_item function in mm/ksm.c in the Linux kernel before 2.6.39.3, when Kernel SamePage Merging (KSM) is enabled, allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/06/1 - https://github.com/torvalds/linux/commit/2b472611a32a72f4a118c069c2d62a1a3f087afd - https://bugzilla.redhat.com/s
06/1 - https://github.com/torvalds/linux/commit/2b472611a32a72f4a118c069c2d62a1a3f087afd - https://bugzilla.redhat.com/show_bug.cgi?id=710338 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2b472611a32a72f4a118c069c2d62a1a3f087afd - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39.3
CVE ID: CVE-2011-2184 State: PUBLISHED Published: 2011-09-06T16:00:00 Last Updated: 2024-08-06T22:53:17.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: The key_replace_session_keyring function in security/keys/process_keys.c in the Linux kernel before 2.6.39.1 does not initialize a certain structure member, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a KEYCTL_SESSION_TO_PARENT argument to the keyctl function, a different vulnerability than CVE-2010-2960. Additional Analyst Notes: - CVE Program Container: References: - http://alt.swiecki.net/linux_kernel/sys_open-kmem_cache_alloc-2.6.39
alyst Notes: - CVE Program Container: References: - http://alt.swiecki.net/linux_kernel/sys_open-kmem_cache_alloc-2.6.39-rc4.txt - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f7285b5d631fd6096b11c6af0058ed3a2b30ef4e - http://www.openwall.com/lists/oss-security/2011/06/03/2 - https://lkml.org/lkml/2011/5/24/502 - https://lkml.org/lkml/2011/5/23/199 - https://lkml.org/lkml/2011/5/25/265 - http://securityreason.com/securityalert/8371 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39.1 - http://www.openwall.com/lists/oss-security/2011/06/06/2
CVE ID: CVE-2011-2185 State: PUBLISHED Published: 2011-07-27T01:29:00Z Last Updated: 2024-08-06T22:53:17.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fabric before 1.1.0 allows local users to overwrite arbitrary files via a symlink attack on (1) a /tmp/fab.*.tar file or (2) certain other files in the top level of /tmp/. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/06/12 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629003 - http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062534.html - http://www.openwall.com/lists/oss-security/2011/06/03/5 - https://bugzilla.redhat.com/show_bug.
/2011-July/062534.html - http://www.openwall.com/lists/oss-security/2011/06/03/5 - https://bugzilla.redhat.com/show_bug.cgi?id=710462 - http://code.fabfile.org/projects/fabric/files/Fabric-1.1.0.tar.gz
CVE ID: CVE-2011-2186 State: REJECTED Published: N/A Last Updated: 2023-02-12T00:00:00 Description: No description available.
CVE ID: CVE-2011-2187 State: PUBLISHED Published: 2019-11-27T17:28:08 Last Updated: 2024-08-06T22:53:17.511Z Vendors: xscreensaver Products: xscreensaver Problem Types: exits when activated (DPMSForceLevel) Description: xscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank Only Mode and when DPMS is disabled, which allows local attackers to access resources without authentication. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-2187 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2187 - https://access.redhat.com/security/cve/cve-2011-2187 - https://bugs.debian.org/cgi-bin/bu
how_bug.cgi?id=CVE-2011-2187 - https://access.redhat.com/security/cve/cve-2011-2187 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=627382 - https://www.openwall.com/lists/oss-security/2011/06/06/17 - https://www.jwz.org/xscreensaver/changelog.html
CVE ID: CVE-2011-2188 State: PUBLISHED Published: 2011-06-21T01:00:00 Last Updated: 2024-08-06T22:53:17.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: LuaExpat before 1.2.0 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/48123 - http://www.openwall.com/lists/oss-security/2011/06/06/4 - https://bugzilla.redhat.com/show_bug.cgi?id=711027 - http://www.openwall.com/lists
com/lists/oss-security/2011/06/06/4 - https://bugzilla.redhat.com/show_bug.cgi?id=711027 - http://www.openwall.com/lists/oss-security/2011/06/06/19 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629225 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67862 - http://secunia.com/advisories/44866
CVE ID: CVE-2011-2189 State: PUBLISHED Published: 2011-10-10T10:00:00 Last Updated: 2024-08-06T22:53:17.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/core/net_namespace.c in the Linux kernel 2.6.32 and earlier does not properly handle a high rate of creation and cleanup of network namespaces, which makes it easier for remote attackers to cause a denial of service (memory consumption) via requests to a daemon that requires a separate namespace per connection, as demonstrated by vsftpd. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=711245 - https://bugs.launchpad.net/ubuntu/+source/linux/+bug/720095 - http://n
ps://bugzilla.redhat.com/show_bug.cgi?id=711245 - https://bugs.launchpad.net/ubuntu/+source/linux/+bug/720095 - http://neil.brown.name/git?p=linux-2.6%3Ba=patch%3Bh=2b035b39970740722598f7a9d548835f9bdd730f - http://www.openwall.com/lists/oss-security/2011/06/06/20 - http://www.openwall.com/lists/oss-security/2011/06/06/10 - http://ie.archive.ubuntu.com/linux/kernel/v2.6/ChangeLog-2.6.33 - http://www.debian.org/security/2011/dsa-2305 - http://patchwork.ozlabs.org/patch/88217/ - http://kerneltrap.org/mailarchive/git-commits-head/2009/12/8/15289 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629373 - http://www.ubuntu.com/usn/USN-1288-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/l
n/bugreport.cgi?bug=629373 - http://www.ubuntu.com/usn/USN-1288-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2b035b39970740722598f7a9d548835f9bdd730f - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f875bae065334907796da12523f9df85c89f5712 - https://bugzilla.redhat.com/show_bug.cgi?id=711134
CVE ID: CVE-2011-2190 State: PUBLISHED Published: 2011-10-07T01:00:00Z Last Updated: 2024-08-06T22:53:17.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: The generate_admin_password function in Cherokee before 1.2.99 uses time and PID values for seeding of a random number generator, which makes it easier for local users to determine admin passwords via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/49772 - http://code.google.com/p/cherokee/issues/detail?id=1212 - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066222.html - http://www.openwall.com/lists/oss-security/2011/06/03/4 -
ct.org/pipermail/package-announce/2011-September/066222.html - http://www.openwall.com/lists/oss-security/2011/06/03/4 - http://www.cherokee-project.com/download/LATEST_is_1.2.99/cherokee-1.2.99.tar.gz - https://bugzilla.redhat.com/show_bug.cgi?id=713304 - http://www.openwall.com/lists/oss-security/2011/06/06/21