Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
o/?l=bugtraq&m=133469208622507&w=2 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://bugs.php.net/bug.php?id=54002 - http://openwall.com/lists/oss-security/2011/02/16/7 - http://www.redhat.com/support/errata/RHSA-2011-1423.html - http://openwall.com/lists/oss-security/2011/02/14/1 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057710.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:052 - http://securityreason.com/securityalert/8114 - http://www.securityfocus.com/bid/46365 - http://www.vupen.com/english/advisories/2011/0744 - http://rhn.redhat.com/errata/RHSA-2012-0071.html - http://support.apple.com/kb/HT5002 - http
lish/advisories/2011/0744 - http://rhn.redhat.com/errata/RHSA-2012-0071.html - http://support.apple.com/kb/HT5002 - http://svn.php.net/viewvc?view=revision&revision=308316
CVE ID: CVE-2011-0709 State: PUBLISHED Published: 2011-02-18T19:00:00Z Last Updated: 2024-08-06T21:58:26.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: The br_mdb_ip_get function in net/bridge/br_multicast.c in the Linux kernel before 2.6.35-rc5 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via an IGMP packet, related to lack of a multicast table. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.35/ChangeLog-2.6.35-rc5 - http://openwall.com/lists/oss-security/2011/02/16/14 - http://www.securityfocus.com/bid/41432 - http://www.spinics.net/lists/netdev/ms
l.com/lists/oss-security/2011/02/16/14 - http://www.securityfocus.com/bid/41432 - http://www.spinics.net/lists/netdev/msg134444.html - http://openwall.com/lists/oss-security/2011/02/16/1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7f285fa78d4b81b8458f05e77fb6b46245121b4e - http://openwall.com/lists/oss-security/2011/02/16/8 - http://www.spinics.net/lists/netdev/msg134414.html
CVE ID: CVE-2011-0710 State: PUBLISHED Published: 2011-02-18T19:00:00 Last Updated: 2024-08-06T21:58:26.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: The task_show_regs function in arch/s390/kernel/traps.c in the Linux kernel before 2.6.38-rc4-next-20110216 on the s390 platform allows local users to obtain the values of the registers of an arbitrary process by reading a status file under /proc/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.38-rc4-next-20110216.bz2 - https://bugzilla.redhat.com/sh
- http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.38-rc4-next-20110216.bz2 - https://bugzilla.redhat.com/show_bug.cgi?id=677850 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://openwall.com/lists/oss-security/2011/02/16/3 - http://openwall.com/lists/oss-security/2011/02/16/9 - http://www.securityfocus.com/bid/46421 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=261cd298a8c363d7985e3482946edb4bfedacf98 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65464
CVE ID: CVE-2011-0711 State: PUBLISHED Published: 2011-03-01T22:00:00 Last Updated: 2024-08-06T21:58:26.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xfs_fs_geometry function in fs/xfs/xfs_fsops.c in the Linux kernel before 2.6.38-rc6-git3 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an FSGEOMETRY_V1 ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46417 - https://patchwork.kernel.org/patch/555461/ - http://rhn.redhat.com/errata/RHSA-2011-0927.html - https://bugzilla.redhat.com/show_bug.cgi?id=677260 - http://o
5461/ - http://rhn.redhat.com/errata/RHSA-2011-0927.html - https://bugzilla.redhat.com/show_bug.cgi?id=677260 - http://openwall.com/lists/oss-security/2011/02/16/10 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3a3675b7f23f83ca8c67c9c2b6edf707fd28d1ba - http://openwall.com/lists/oss-security/2011/02/16/4 - http://osvdb.org/70950 - http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.38-rc6-git3.log
CVE ID: CVE-2011-0712 State: PUBLISHED Published: 2011-02-18T19:00:00 Last Updated: 2024-08-06T22:05:52.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the caiaq Native Instruments USB audio functionality in the Linux kernel before 2.6.38-rc4-next-20110215 might allow attackers to cause a denial of service or possibly have unspecified other impact via a long USB device name, related to (1) the snd_usb_caiaq_audio_init function in sound/usb/caiaq/audio.c and (2) the snd_usb_caiaq_midi_init function in sound/usb/caiaq/midi.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1146-1 - http://www.openwall.c
ional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1146-1 - http://www.openwall.com/lists/oss-security/2011/02/16/11 - https://bugzilla.redhat.com/show_bug.cgi?id=677881 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65461 - http://www.securityfocus.com/bid/46419 - http://www.openwall.com/lists/oss-security/2011/02/16/5 - http://git.kernel.org/?p=linux/kernel/git/tiwai/sound-2.6.git%3Ba=commit%3Bh=eaae55dac6b64c0616046436b294e69fc5311581 - http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.38-rc4-next-20110215.bz2 - http://www.openwall.com/lists/oss-security/2011/02/16/12
CVE ID: CVE-2011-0713 State: PUBLISHED Published: 2011-03-03T00:00:00 Last Updated: 2024-08-06T22:05:53.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in wiretap/dct3trace.c in Wireshark 1.2.0 through 1.2.14 and 1.4.0 through 1.4.3 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a long record in a Nokia DCT3 trace file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43759 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055364.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055664.h
/package-announce/2011-March/055364.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055664.html - http://www.securityfocus.com/bid/46416 - http://www.wireshark.org/docs/relnotes/wireshark-1.2.15.html - http://openwall.com/lists/oss-security/2011/02/16/13 - http://www.vupen.com/english/advisories/2011/0747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65780 - http://www.vupen.com/english/advisories/2011/0626 - http://secunia.com/advisories/43795 - http://www.kb.cert.org/vuls/id/215900 - http://www.vupen.com/english/advisories/2011/0719 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14766 - http://www.wireshark.org/
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14766 - http://www.wireshark.org/docs/relnotes/wireshark-1.4.4.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055650.html - http://www.wireshark.org/security/wnpa-sec-2011-04.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/65460 - http://www.vupen.com/english/advisories/2011/0622 - https://bugzilla.redhat.com/show_bug.cgi?id=678198 - http://www.wireshark.org/security/wnpa-sec-2011-03.html - http://www.redhat.com/support/errata/RHSA-2011-0369.html - http://anonsvn.wireshark.org/viewvc?view=rev&revision=35953 - http://www.mandriva.com/security/advisories?name=MDVSA-20
http://anonsvn.wireshark.org/viewvc?view=rev&revision=35953 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:044 - http://www.securitytracker.com/id?1025148 - http://www.debian.org/security/2011/dsa-2201
CVE ID: CVE-2011-0714 State: PUBLISHED Published: 2011-05-04T22:00:00Z Last Updated: 2024-08-06T22:05:53.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in a certain Red Hat patch for the RPC server sockets functionality in the Linux kernel 2.6.32 on Red Hat Enterprise Linux (RHEL) 6 might allow remote attackers to cause a denial of service (crash) via malformed data in a packet, related to lockd and the svc_xprt_received function. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/03/08/17 - https://bugzilla.redhat.com/show_bug.cgi?id=678144 - http://openwall.com/lists/oss-security/2011/03
rity/2011/03/08/17 - https://bugzilla.redhat.com/show_bug.cgi?id=678144 - http://openwall.com/lists/oss-security/2011/03/09/1 - https://rhn.redhat.com/errata/RHSA-2011-0329.html
CVE ID: CVE-2011-0715 State: PUBLISHED Published: 2011-03-11T22:00:00 Last Updated: 2024-08-06T22:05:52.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.16, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request that contains a lock token. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1025161 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:067 - http://support.apple.com/kb/HT4723 - http://www.ubuntu.com/usn/USN-1096-1 - http://www.vupen.com/english/advisories/2011
http://support.apple.com/kb/HT4723 - http://www.ubuntu.com/usn/USN-1096-1 - http://www.vupen.com/english/advisories/2011/0567 - http://secunia.com/advisories/43583 - http://www.securityfocus.com/bid/46734 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056071.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18967 - http://www.vupen.com/english/advisories/2011/0568 - http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html - http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.479953 - http://www.debian.org/security/2011/dsa-2181 - https://rhn.redhat.com/errata/RHSA-2011-0
1&m=slackware-security.479953 - http://www.debian.org/security/2011/dsa-2181 - https://rhn.redhat.com/errata/RHSA-2011-0327.html - http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html - http://www.vupen.com/english/advisories/2011/0776 - http://www.vupen.com/english/advisories/2011/0660 - http://svn.apache.org/repos/asf/subversion/tags/1.6.16/CHANGES - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056072.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056736.html - http://subversion.apache.org/security/CVE-2011-0715-advisory.txt - https://rhn.redhat.com/errata/RHSA-2011-0328.html - http://www.vupen.com/english/advisorie
/CVE-2011-0715-advisory.txt - https://rhn.redhat.com/errata/RHSA-2011-0328.html - http://www.vupen.com/english/advisories/2011/0684 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65876 - https://bugzilla.redhat.com/show_bug.cgi?id=680755 - http://svn.haxx.se/dev/archive-2011-03/0122.shtml - http://secunia.com/advisories/43794 - http://www.vupen.com/english/advisories/2011/0885 - http://www.vupen.com/english/advisories/2011/0624 - http://secunia.com/advisories/43603 - http://secunia.com/advisories/43672 - http://svn.apache.org/viewvc?view=revision&revision=1071239 - http://svn.apache.org/viewvc?view=revision&revision=1071307 - http://www.osvdb.org/70964
CVE ID: CVE-2011-0716 State: PUBLISHED Published: 2012-06-21T23:00:00Z Last Updated: 2024-08-06T22:05:52.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: The br_multicast_add_group function in net/bridge/br_multicast.c in the Linux kernel before 2.6.38, when a certain Ethernet bridge configuration is used, allows local users to cause a denial of service (memory corruption and system crash) by sending IGMP packets to a local interface. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6b0d6a9b4296fa16a28d10d416db7a770fc03287 - http://www.openwall.com/lists/oss-security/2011/02/17/2 -
git%3Ba=commit%3Bh=6b0d6a9b4296fa16a28d10d416db7a770fc03287 - http://www.openwall.com/lists/oss-security/2011/02/17/2 - https://bugzilla.redhat.com/show_bug.cgi?id=678169 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38 - https://github.com/torvalds/linux/commit/6b0d6a9b4296fa16a28d10d416db7a770fc03287
CVE ID: CVE-2011-0717 State: PUBLISHED Published: 2011-02-25T18:00:00 Last Updated: 2024-08-06T22:05:52.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in Red Hat Network (RHN) Satellite Server 5.4 allows remote attackers to hijack web sessions via unspecified vectors related to Spacewalk. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46528 - http://www.vupen.com/english/advisories/2011/0491 - http://www.redhat.com/support/errata/RHSA-2011-0300.html - https://bugzilla.redhat.com/show_bug.cgi?id=672159 - http://www.securitytracker.com/id?1025116 - https://exchange.xforce.ibmcloud.com/vulnerabili
om/show_bug.cgi?id=672159 - http://www.securitytracker.com/id?1025116 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65658 - http://secunia.com/advisories/43487
CVE ID: CVE-2011-0718 State: PUBLISHED Published: 2011-02-25T18:00:00 Last Updated: 2024-08-06T22:05:53.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat Network (RHN) Satellite Server 5.4 does not use a time delay after a failed login attempt, which makes it easier for remote attackers to conduct brute force password guessing attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46528 - http://www.vupen.com/english/advisories/2011/0491 - http://www.redhat.com/support/errata/RHSA-2011-0300.html - https://bugzilla.redhat.com/show_bug.cgi?id=672159 - http://www.securitytracker.com/id?1025116 - https://exchange.xforce.ib
ps://bugzilla.redhat.com/show_bug.cgi?id=672159 - http://www.securitytracker.com/id?1025116 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65657 - http://secunia.com/advisories/43487
CVE ID: CVE-2011-0719 State: PUBLISHED Published: 2011-03-01T22:00:00 Last Updated: 2024-08-06T22:05:52.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samba 3.x before 3.3.15, 3.4.x before 3.4.12, and 3.5.x before 3.5.7 does not perform range checks for file descriptors before use of the FD_SET macro, which allows remote attackers to cause a denial of service (stack memory corruption, and infinite loop or daemon crash) by opening a large number of files, related to (1) Winbind or (2) smbd. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=130835366526620&w=2 - http://www.vupen.com/english/advisories/2011/0522 - http://slackware.co
p://marc.info/?l=bugtraq&m=130835366526620&w=2 - http://www.vupen.com/english/advisories/2011/0522 - http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.593629 - http://www.securitytracker.com/id?1025132 - http://support.apple.com/kb/HT4723 - https://bugzilla.redhat.com/show_bug.cgi?id=678328 - http://www.redhat.com/support/errata/RHSA-2011-0306.html - http://www.debian.org/security/2011/dsa-2175 - http://www.securityfocus.com/bid/46597 - http://www.vupen.com/english/advisories/2011/0541 - http://www.vupen.com/english/advisories/2011/0517 - http://www.vupen.com/english/advisories/2011/0702 - http://lists.apple.com/archives/security-announce/2011//Jun/msg
17 - http://www.vupen.com/english/advisories/2011/0702 - http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html - http://www.samba.org/samba/history/samba-3.4.12.html - http://marc.info/?l=bugtraq&m=130835366526620&w=2 - http://www.vupen.com/english/advisories/2011/0518 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056241.html - http://secunia.com/advisories/43517 - http://secunia.com/advisories/43557 - http://secunia.com/advisories/43556 - http://secunia.com/advisories/43512 - http://www.ubuntu.com/usn/USN-1075-1 - http://www.vupen.com/english/advisories/2011/0519 - http://samba.org/samba/security/CVE-2011-0719.html - http://www.vupen.com/english/
en.com/english/advisories/2011/0519 - http://samba.org/samba/security/CVE-2011-0719.html - http://www.vupen.com/english/advisories/2011/0520 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056229.html - http://secunia.com/advisories/43503 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65724 - http://www.redhat.com/support/errata/RHSA-2011-0305.html - http://www.samba.org/samba/history/samba-3.5.7.html - http://secunia.com/advisories/43482 - http://secunia.com/advisories/43843 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:038 - http://www.samba.org/samba/history/samba-3.3.15.html
CVE ID: CVE-2011-0720 State: PUBLISHED Published: 2011-02-03T16:00:00 Last Updated: 2024-08-06T22:05:53.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Plone 2.5 through 4.0, as used in Conga, luci, and possibly other products, allows remote attackers to obtain administrative access, read or create arbitrary content, and change the site skin via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/70753 - http://plone.org/products/plone/security/advisories/cve-2011-0720 - http://www.securityfocus.com/bid/46102 - http://secunia.com/advisories/43146 - http://www.redhat.com/support/errata/RHSA-2011-0393.h
ecurityfocus.com/bid/46102 - http://secunia.com/advisories/43146 - http://www.redhat.com/support/errata/RHSA-2011-0393.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/65099 - http://www.vupen.com/english/advisories/2011/0796 - http://secunia.com/advisories/43914 - http://www.securitytracker.com/id?1025258 - http://www.redhat.com/support/errata/RHSA-2011-0394.html
CVE ID: CVE-2011-0721 State: PUBLISHED Published: 2011-02-18T23:00:00 Last Updated: 2024-08-06T22:05:53.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple CRLF injection vulnerabilities in (1) chfn and (2) chsh in shadow 1:4.1.4 allow local users to add new users or groups to /etc/passwd via the GECOS field. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0398 - http://www.vupen.com/english/advisories/2011/0773 - http://secunia.com/advisories/43345 - http://www.debian.org/security/2011/dsa-2164 - http://www.ubuntu.com/usn/USN-1065-1 - http://www.vupen.com/english/advisories/2011/0396 - https://exchange.xforce
164 - http://www.ubuntu.com/usn/USN-1065-1 - http://www.vupen.com/english/advisories/2011/0396 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65564 - http://osvdb.org/70895 - http://www.securityfocus.com/bid/46426 - http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.380014 - http://secunia.com/advisories/42505
CVE ID: CVE-2011-0722 State: PUBLISHED Published: 2011-05-20T22:00:00 Last Updated: 2024-08-06T22:05:53.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a malformed RealMedia file. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2011/dsa-2306 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:061 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:062 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:1
www.mandriva.com/security/advisories?name=MDVSA-2011:062 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:114 - http://www.ubuntu.com/usn/usn-1104-1/ - http://www.mandriva.com/security/advisories?name=MDVSA-2011:089 - http://ffmpeg.mplayerhq.hu/ - http://www.vupen.com/english/advisories/2011/1241 - http://www.securityfocus.com/bid/47149
CVE ID: CVE-2011-0723 State: PUBLISHED Published: 2011-05-20T22:00:00 Last Updated: 2024-08-06T22:05:53.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg 0.5.x, as used in MPlayer and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed VC-1 file. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2011/dsa-2306 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:061 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:062 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:112 - http://www.mandriva.com/security/a
me=MDVSA-2011:062 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:112 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:114 - http://www.ubuntu.com/usn/usn-1104-1/ - http://www.mandriva.com/security/advisories?name=MDVSA-2011:089 - http://www.securityfocus.com/bid/47151 - http://www.vupen.com/english/advisories/2011/1241 - http://ffmpeg.mplayerhq.hu/
CVE ID: CVE-2011-0724 State: PUBLISHED Published: 2011-02-18T23:00:00 Last Updated: 2024-08-06T22:05:53.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Live DVD for Edubuntu 9.10, 10.04 LTS, and 10.10 does not correctly regenerate iTALC private keys after installation, which causes each installation to have the same fixed key, which allows remote attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1061-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65389 - http://www.securityfocus.com/bid/46346 - http://www.vupen.com/english/advisories/2011/0378
CVE ID: CVE-2011-0725 State: PUBLISHED Published: 2011-02-23T18:00:00 Last Updated: 2024-08-06T22:05:52.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in the org.debian.apt.UpdateCachePartially method in worker.py in Aptdaemon 0.40 in Ubuntu 10.10 and 11.04 allows local users to read arbitrary files via a full pathname in the sources_list argument, related to the D-Bus interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46490 - http://www.vupen.com/english/advisories/2011/0459 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65652 - http://www.ubuntu.com/usn/USN-1068-1 - http
ies/2011/0459 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65652 - http://www.ubuntu.com/usn/USN-1068-1 - http://www.securitytracker.com/id?1025107 - https://bugs.launchpad.net/bugs/722228
CVE ID: CVE-2011-0726 State: PUBLISHED Published: 2011-07-18T22:00:00 Last Updated: 2024-08-06T22:05:53.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_task_stat function in fs/proc/array.c in the Linux kernel before 2.6.39-rc1 does not perform an expected uid check, which makes it easier for local users to defeat the ASLR protection mechanism by reading the start_code and end_code fields in the /proc/#####/stat file for a process executing a PIE binary. Additional Analyst Notes: - CVE Program Container: References: - http://www.spinics.net/lists/mm-commits/msg82726.html - https://bugzilla.redhat.com/show_bug.cgi?id=684569 - http://www.securityfocus.com/bid/47791 - htt
ommits/msg82726.html - https://bugzilla.redhat.com/show_bug.cgi?id=684569 - http://www.securityfocus.com/bid/47791 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5883f57ca0008ffc93e09cbb9847a1928e50c6f3 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.39/ChangeLog-2.6.39-rc1 - http://rhn.redhat.com/errata/RHSA-2011-0833.html - http://downloads.avaya.com/css/P8/documents/100145416 - https://lkml.org/lkml/2011/3/11/380