Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-6074 State: PUBLISHED Published: 2013-02-24T22:00:00 Last Updated: 2024-08-06T21:21:28.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.13, 1.447.x before 1.447.4.1, and 1.466.x before 1.466.10.1 allows remote authenticated users with write access to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-0220.html - http://www.openwall.com/lists/oss-security/2012/12/28/1 - https://wiki.jenkins-ci.org/display/SECURI
SA-2013-0220.html - http://www.openwall.com/lists/oss-security/2012/12/28/1 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2012-11-20 - https://bugzilla.redhat.com/show_bug.cgi?id=890612 - http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2012-11-20.cb
CVE ID: CVE-2012-6075 State: PUBLISHED Published: 2013-02-13T01:00:00 Last Updated: 2024-08-06T21:21:28.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the e1000_receive function in the e1000 device driver (hw/e1000.c) in QEMU 1.3.0-rc2 and other versions, when the SBP and LPE flags are disabled, allows remote attackers to cause a denial of service (guest OS crash) and possibly execute arbitrary guest code via a large packet. Additional Analyst Notes: - CVE Program Container: References: - http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=b0d9ffcd0251161c7c92f94804dcf599dfa3edeb - http://lists.fedoraproject.org/pipermail/package-announce/2013-January/09757
=b0d9ffcd0251161c7c92f94804dcf599dfa3edeb - http://lists.fedoraproject.org/pipermail/package-announce/2013-January/097575.html - http://secunia.com/advisories/55082 - http://www.debian.org/security/2013/dsa-2608 - http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://www.openwall.com/lists/oss-security/2012/12/30/1 - http://www.debian.org/security/2013/dsa-2607 - https://bugzilla.redhat.com/show_bug.cgi?id=889301 - http://rhn.redhat.com/errata/RHSA-2013-0639.html - http://rhn.redhat.com/errata/RHSA-2013-0608.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-January/097705.html - http://rhn.redhat.com
3-0608.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-January/097705.html - http://rhn.redhat.com/errata/RHSA-2013-0610.html - http://rhn.redhat.com/errata/RHSA-2013-0609.html - http://www.ubuntu.com/usn/USN-1692-1 - http://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html - http://www.debian.org/security/2013/dsa-2619 - http://lists.nongnu.org/archive/html/qemu-devel/2012-12/msg00533.html - http://rhn.redhat.com/errata/RHSA-2013-0599.html - http://www.securityfocus.com/bid/57420 - http://lists.fedoraproject.org/pipermail/package-announce/2013-January/097541.html
CVE ID: CVE-2012-6076 State: PUBLISHED Published: 2013-03-12T21:00:00Z Last Updated: 2024-08-06T21:21:28.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Inkscape before 0.48.4 reads .eps files from /tmp instead of the current directory, which might cause Inkspace to process unintended files, allow local users to obtain sensitive information, and possibly have other unspecified impacts. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/12/30/2 - http://www.ubuntu.com/usn/USN-1712-1 - https://bugs.launchpad.net/inkscape/+bug/911146 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00041.html - http://lists.ope
launchpad.net/inkscape/+bug/911146 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00041.html - http://lists.opensuse.org/opensuse-updates/2013-02/msg00043.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=654341
CVE ID: CVE-2012-6077 State: PUBLISHED Published: 2019-11-22T18:44:55 Last Updated: 2024-08-06T21:21:28.514Z Vendors: W3 Products: Total Cache Problem Types: Password Description: W3 Total Cache before 0.9.2.5 allows remote attackers to retrieve password hash information due to insecure storage of database cache files. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-6077 - http://www.openwall.com/lists/oss-security/2012/12/30/3 - https://www.checkpoint.com/defense/advisories/public/2013/cpai-24-oct2.html - https://www.w3-edge.com/weblog/2013/01/security-w3-total-cache-0-9-2-4/ - https://www.acunetix.com/vulnerabilities/web
- https://www.w3-edge.com/weblog/2013/01/security-w3-total-cache-0-9-2-4/ - https://www.acunetix.com/vulnerabilities/web/wordpress-w3-total-cache-plugin-predictable-cache-filenames/
CVE ID: CVE-2012-6078 State: PUBLISHED Published: 2019-11-22T18:50:14 Last Updated: 2024-08-06T21:21:28.375Z Vendors: W3 Products: Total Cache Problem Types: Password Description: W3 Total Cache before 0.9.2.5 generates hash keys insecurely which allows remote attackers to predict the values of the hashes. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-6078 - http://www.openwall.com/lists/oss-security/2012/12/30/3 - https://www.w3-edge.com/weblog/2013/01/security-w3-total-cache-0-9-2-4/ - https://www.acunetix.com/vulnerabilities/web/wordpress-w3-total-cache-plugin-predictable-cache-filenames/
CVE ID: CVE-2012-6079 State: PUBLISHED Published: 2019-11-22T18:55:08 Last Updated: 2024-08-06T21:21:28.524Z Vendors: W3 Products: Total Cache Problem Types: Other Description: W3 Total Cache before 0.9.2.5 exposes sensitive cached database information which allows remote attackers to download this information via their hash keys. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/12/30/3 - https://security-tracker.debian.org/tracker/CVE-2012-6079 - https://www.w3-edge.com/weblog/2013/01/security-w3-total-cache-0-9-2-4/ - https://www.acunetix.com/vulnerabilities/web/wordpress-w3-total-cache-plugin-predictable-cache-filenames/
CVE ID: CVE-2012-6080 State: PUBLISHED Published: 2013-01-03T01:00:00Z Last Updated: 2024-08-06T21:21:28.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the _do_attachment_move function in the AttachFile action (action/AttachFile.py) in MoinMoin 1.9.3 through 1.9.5 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a file name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/57076 - http://moinmo.in/SecurityFixes - http://secunia.com/advisories/51663 - http://www.debian.org/security/2012/dsa-2593 - https://bugs.launchpad.net/ubuntu/+source/moin/+bug/1094599 - http://
3 - http://www.debian.org/security/2012/dsa-2593 - https://bugs.launchpad.net/ubuntu/+source/moin/+bug/1094599 - http://secunia.com/advisories/51676 - http://hg.moinmo.in/moin/1.9/rev/3c27131a3c52 - http://secunia.com/advisories/51696 - http://ubuntu.com/usn/usn-1680-1 - http://www.openwall.com/lists/oss-security/2012/12/30/6
CVE ID: CVE-2012-6081 State: PUBLISHED Published: 2013-01-03T01:00:00 Last Updated: 2024-08-06T21:21:28.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unrestricted file upload vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) actions in MoinMoin before 1.9.6 allow remote authenticated users with write permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory, as exploited in the wild in July 2012. Additional Analyst Notes: - CVE Program Container: References: - http://moinmo.in/MoinMoinRelease1.9 - http://m
ly 2012. Additional Analyst Notes: - CVE Program Container: References: - http://moinmo.in/MoinMoinRelease1.9 - http://moinmo.in/SecurityFixes - http://secunia.com/advisories/51663 - http://hg.moinmo.in/moin/1.9/rev/7e7e1cbb9d3f - http://www.debian.org/security/2012/dsa-2593 - https://bugs.launchpad.net/ubuntu/+source/moin/+bug/1094599 - http://www.securityfocus.com/bid/57082 - http://www.openwall.com/lists/oss-security/2012/12/29/6 - http://secunia.com/advisories/51676 - http://www.openwall.com/lists/oss-security/2012/12/30/4 - http://secunia.com/advisories/51696 - http://www.exploit-db.com/exploits/25304 - http://ubuntu.com/usn/usn-1680-1
CVE ID: CVE-2012-6082 State: PUBLISHED Published: 2013-01-03T01:00:00Z Last Updated: 2024-08-06T21:21:28.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the rsslink function in theme/__init__.py in MoinMoin 1.9.5 allows remote attackers to inject arbitrary web script or HTML via the page name in a rss link. Additional Analyst Notes: - CVE Program Container: References: - http://moinmo.in/SecurityFixes - http://secunia.com/advisories/51663 - http://www.openwall.com/lists/oss-security/2012/12/30/5 - http://hg.moinmo.in/moin/1.9/rev/c98ec456e493 - http://www.securityfocus.com/bid/57089 - http://www.openwall.com/lists/oss-security/2012/
in/moin/1.9/rev/c98ec456e493 - http://www.securityfocus.com/bid/57089 - http://www.openwall.com/lists/oss-security/2012/12/29/7
CVE ID: CVE-2012-6083 State: PUBLISHED Published: 2020-01-23T17:57:06 Last Updated: 2024-08-06T21:21:28.523Z Vendors: freeciv Products: freeciv Problem Types: Other Description: Freeciv before 2.3.3 allows remote attackers to cause a denial of service via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/12/31/2 - https://freeciv.fandom.com/wiki/NEWS-2.3.3
CVE ID: CVE-2012-6084 State: PUBLISHED Published: 2013-01-01T15:00:00 Last Updated: 2024-08-06T21:21:28.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: modules/m_capab.c in (1) ircd-ratbox before 3.0.8 and (2) Charybdis before 3.4.2 does not properly support capability negotiation during server handshakes, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a malformed request. Additional Analyst Notes: - CVE Program Container: References: - http://rabbit.dereferenced.org/~nenolod/ASA-2012-12-31.txt - https://github.com/atheme/charybdis/commit/ac0707aa61d9c20e9b09062294701567c9f41595.patch - http://www.stack.nl/~jilles/ir
tps://github.com/atheme/charybdis/commit/ac0707aa61d9c20e9b09062294701567c9f41595.patch - http://www.stack.nl/~jilles/irc/charybdis-3.4.2.tbz2 - http://openwall.com/lists/oss-security/2013/01/01/4 - http://www.debian.org/security/2013/dsa-2612 - http://www.ratbox.org/download/ircd-ratbox-3.0.8.tar.bz2
CVE ID: CVE-2012-6085 State: PUBLISHED Published: 2013-01-24T01:00:00 Last Updated: 2024-08-06T21:21:28.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: The read_block function in g10/import.c in GnuPG 1.4.x before 1.4.13 and 2.0.x through 2.0.19, when importing a key, allows remote attackers to corrupt the public keyring database or cause a denial of service (application crash) via a crafted length field of an OpenPGP packet. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=891142 - https://bugs.g10code.com/gnupg/issue1455 - http://www.securityfocus.com/bid/57102 - http://lists.fedoraproject.org/pipermail/package-ann
code.com/gnupg/issue1455 - http://www.securityfocus.com/bid/57102 - http://lists.fedoraproject.org/pipermail/package-announce/2013-January/095516.html - http://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git%3Ba=commitdiff%3Bh=f0b33b6fb8e0586e9584a7a409dcc31263776a67 - http://www.openwall.com/lists/oss-security/2013/01/01/6 - http://lists.fedoraproject.org/pipermail/package-announce/2013-January/095513.html - http://rhn.redhat.com/errata/RHSA-2013-1459.html - http://www.ubuntu.com/usn/USN-1682-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:001 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80990
CVE ID: CVE-2012-6086 State: PUBLISHED Published: 2014-01-29T18:00:00 Last Updated: 2024-08-06T21:21:28.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: libs/zbxmedia/eztexting.c in Zabbix 1.8.x before 1.8.18rc1, 2.0.x before 2.0.8rc1, and 2.1.x before 2.1.2 does not properly set the CURLOPT_SSL_VERIFYHOST option for libcurl, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/57103 - https://support.zabbix.com/browse/ZBX-5924 - http://www.openwall.com/lists/oss-security/2013/01/03/1
CVE ID: CVE-2012-6087 State: PUBLISHED Published: 2013-09-16T10:00:00 Last Updated: 2024-08-06T21:21:28.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: repository/s3/S3.php in the Amazon S3 library in Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5.x before 2.5.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to an incorrect CURLOPT_SSL_VERIFYHOST value. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle
SSL_VERIFYHOST value. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-40615 - http://www.openwall.com/lists/oss-security/2013/01/03/1 - https://moodle.org/mod/forum/discuss.php?d=238393
CVE ID: CVE-2012-6088 State: PUBLISHED Published: 2013-01-18T11:00:00 Last Updated: 2024-08-06T21:21:28.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rpmpkgRead function in lib/package.c in RPM 4.10.x before 4.10.2 does not return an error code in certain situations involving an "unparseable signature," which allows remote attackers to bypass RPM signature checks via a crafted package. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.novell.com/show_bug.cgi?id=796375 - http://www.securityfocus.com/bid/57138 - http://secunia.com/advisories/51706 - http://www.openwall.com/lists/oss-security/2013/01/03/9 - http://rpm.org/gitweb?p=rpm.git%3B
unia.com/advisories/51706 - http://www.openwall.com/lists/oss-security/2013/01/03/9 - http://rpm.org/gitweb?p=rpm.git%3Ba=commitdiff%3Bh=3d74c43 - http://www.ubuntu.com/usn/USN-1694-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80953 - http://rpm.org/wiki/Releases/4.10.2
CVE ID: CVE-2012-6089 State: PUBLISHED Published: 2013-01-04T11:00:00Z Last Updated: 2024-09-17T01:55:59.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the canoniseFileName function in os/pl-os.c in SWI-Prolog before 6.2.5 and 6.3.x before 6.3.7 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted filename. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2013/01/03/7 - https://lists.iai.uni-bonn.de/pipermail/swi-prolog/2012/009428.html - https://bugzilla.redhat.com/show_bug.cgi?id=891577 - http://www.swi-prolog.o
.de/pipermail/swi-prolog/2012/009428.html - https://bugzilla.redhat.com/show_bug.cgi?id=891577 - http://www.swi-prolog.org/git/pl.git/commit/a9a6fc8a2a9cf3b9154b490a4b1ffaa8be4d723c
CVE ID: CVE-2012-6090 State: PUBLISHED Published: 2013-01-04T11:00:00Z Last Updated: 2024-09-16T20:22:34.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the expand function in os/pl-glob.c in SWI-Prolog before 6.2.5 and 6.3.x before 6.3.7 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.swi-prolog.org/git/pl.git/commit/b2c88972e7515ada025e97e7d3ce3e34f81cf33e - http://openwall.com/lists/oss-security/2013/01/03/7 - https://lists.iai.uni-bonn.de/pipermail/swi-prolog/2012/009428.html
ttp://openwall.com/lists/oss-security/2013/01/03/7 - https://lists.iai.uni-bonn.de/pipermail/swi-prolog/2012/009428.html - https://bugzilla.redhat.com/show_bug.cgi?id=891577
CVE ID: CVE-2012-6091 State: PUBLISHED Published: 2020-02-13T19:07:51 Last Updated: 2024-08-06T21:21:28.688Z Vendors: n/a Products: Magento Problem Types: Information Disclosure Description: Zend_XmlRpc Class in Magento before 1.7.0.2 contains an information disclosure vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/57140 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80973 - http://www.openwall.com/lists/oss-security/2013/01/03/10
CVE ID: CVE-2012-6092 State: PUBLISHED Published: 2013-04-21T21:00:00 Last Updated: 2024-08-06T21:21:28.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the web demos in Apache ActiveMQ before 5.8.0 allow remote attackers to inject arbitrary web script or HTML via (1) the refresh parameter to PortfolioPublishServlet.java (aka demo/portfolioPublish or Market Data Publisher), or vectors involving (2) debug logs or (3) subscribe messages in webapp/websocket/chat.js. NOTE: AMQ-4124 is covered by CVE-2012-6551. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1029.html - ht
. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1029.html - http://www.securityfocus.com/bid/59400 - https://issues.apache.org/jira/browse/AMQ-4115 - https://fisheye6.atlassian.com/changelog/activemq?cs=1399577 - http://activemq.apache.org/activemq-580-release.html - https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12323282
CVE ID: CVE-2012-6093 State: PUBLISHED Published: 2013-02-24T19:00:00Z Last Updated: 2024-08-06T21:21:28.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: The QSslSocket::sslErrors function in Qt before 4.6.5, 4.7.x before 4.7.6, 4.8.x before 4.8.5, when using certain versions of openSSL, uses an "incompatible structure layout" that can read memory from the wrong location, which causes Qt to report an incorrect error when certificate validation fails and might cause users to make unsafe security decisions to accept a certificate. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-01/msg00086.html - https://codereview
E Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-01/msg00086.html - https://codereview.qt-project.org/#change%2C42461 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=697582 - http://www.ubuntu.com/usn/USN-1723-1 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00014.html - http://secunia.com/advisories/52217 - http://lists.opensuse.org/opensuse-updates/2013-01/msg00089.html - http://qt.gitorious.org/qt/qt/commit/3b14dc93cf0ef06f1424d7d6319a1af4505faa53%20%284.7%29 - http://lists.qt-project.org/pipermail/announce/2013-January/000020.html - http://qt.gitorious.org/qt/qt/commit/691e78e5061d4cbc0de212d23b06c5dffddf2098%20%284.8%29 - http://www.openwall
0.html - http://qt.gitorious.org/qt/qt/commit/691e78e5061d4cbc0de212d23b06c5dffddf2098%20%284.8%29 - http://www.openwall.com/lists/oss-security/2013/01/04/6 - https://bugzilla.redhat.com/show_bug.cgi?id=891955
CVE ID: CVE-2012-6094 State: PUBLISHED Published: 2019-12-20T14:07:15 Last Updated: 2024-08-06T21:21:28.520Z Vendors: cups Products: cups Problem Types: 'Listen localhost:631' option not honoured correctly on IPv6-enabled systems when systemd used for CUPS socket activation Description: cups (Common Unix Printing System) 'Listen localhost:631' option not honored correctly which could provide unauthorized access to the system Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-6094 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-6094 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-6094 - https://exchange.xforce.ibmc
m/show_bug.cgi?id=CVE-2012-6094 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-6094 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82451 - http://www.openwall.com/lists/oss-security/2013/01/04/5 - http://www.securityfocus.com/bid/57158 - https://access.redhat.com/security/cve/cve-2012-6094
CVE ID: CVE-2012-6095 State: PUBLISHED Published: 2013-01-24T21:00:00Z Last Updated: 2024-08-06T21:21:28.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: ProFTPD before 1.3.5rc1, when using the UserOwner directive, allows local users to modify the ownership of arbitrary files via a race condition and a symlink attack on the (1) MKD or (2) XMKD commands. Additional Analyst Notes: - CVE Program Container: References: - http://proftpd.org/docs/NEWS-1.3.5rc1 - http://www.openwall.com/lists/oss-security/2013/01/07/3 - http://bugs.proftpd.org/show_bug.cgi?id=3841 - http://secunia.com/advisories/51823 - http://www.debian.org/security/2013/dsa-2606
CVE ID: CVE-2012-6096 State: PUBLISHED Published: 2013-01-22T23:00:00 Last Updated: 2024-08-06T21:21:28.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the get_history function in history.cgi in Nagios Core before 3.4.4, and Icinga 1.6.x before 1.6.2, 1.7.x before 1.7.4, and 1.8.x before 1.8.4, might allow remote attackers to execute arbitrary code via a long (1) host_name variable (host parameter) or (2) svc_description variable. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2012-December/089125.html - http://www.debian.org/security/2013/dsa-2616 - http://lists.open
k/pipermail/full-disclosure/2012-December/089125.html - http://www.debian.org/security/2013/dsa-2616 - http://lists.opensuse.org/opensuse-updates/2013-01/msg00077.html - http://www.exploit-db.com/exploits/24084 - http://lists.opensuse.org/opensuse-updates/2013-01/msg00033.html - http://secunia.com/advisories/51863 - http://lists.opensuse.org/opensuse-updates/2013-01/msg00088.html - http://www.nagios.org/projects/nagioscore/history/core-3x - https://bugzilla.redhat.com/show_bug.cgi?id=893269 - http://www.exploit-db.com/exploits/24159 - http://www.osvdb.org/89170 - https://www.icinga.org/2013/01/14/icinga-1-6-2-1-7-4-1-8-4-released/ - http://lists.opensuse.org/opensuse-updates/2013-01/msg00060
w.icinga.org/2013/01/14/icinga-1-6-2-1-7-4-1-8-4-released/ - http://lists.opensuse.org/opensuse-updates/2013-01/msg00060.html - https://dev.icinga.org/issues/3532 - http://www.debian.org/security/2013/dsa-2653 - http://www.securityfocus.com/bid/56879
CVE ID: CVE-2012-6097 State: PUBLISHED Published: 2013-04-09T20:00:00Z Last Updated: 2024-09-16T18:29:45.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: File descriptor leak in cronie 1.4.8, when running in certain environments, might allow local users to read restricted files, as demonstrated by reading /etc/crontab. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.novell.com/show_bug.cgi?id=786096 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:033 - https://bugzilla.redhat.com/show_bug.cgi?id=893661 - https://bugs.mageia.org/show_bug.cgi?id=8652