Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-1938 State: PUBLISHED Published: 2011-05-31T20:00:00 Last Updated: 2024-08-06T22:46:00.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependent attackers to execute arbitrary code via a long pathname for a UNIX socket. Additional Analyst Notes: - CVE Program Container: References: - http://svn.php.net/viewvc?view=revision&revision=311369 - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://support.apple.com/kb/HT5130 - http://www.securityfocus.com/bid/49241 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:165
com/kb/HT5130 - http://www.securityfocus.com/bid/49241 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:165 - http://openwall.com/lists/oss-security/2011/05/24/9 - http://www.debian.org/security/2012/dsa-2399 - http://svn.php.net/viewvc/php/php-src/trunk/ext/sockets/sockets.c?r1=311369&r2=311368&pathrev=311369 - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html - http://osvdb.org/72644 - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://securityreason.com/securityalert/8294 - http://www.exploit-db.com/exploits/17318/ - http://www.redhat.com/support/errata/RHSA-2011-1423.html - http://www.php.net/ChangeLog-5.php#5.3.7 - http://securityreason.com/se
.redhat.com/support/errata/RHSA-2011-1423.html - http://www.php.net/ChangeLog-5.php#5.3.7 - http://securityreason.com/securityalert/8262 - http://www.php.net/archive/2011.php#id2011-08-18-1 - http://openwall.com/lists/oss-security/2011/05/24/1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67606
CVE ID: CVE-2011-1939 State: PUBLISHED Published: 2019-11-26T21:17:37 Last Updated: 2024-08-06T22:46:00.810Z Vendors: zendframework;PHP Products: zendframework, PHP Problem Types: potential SQL injection vector when using PDO_MySql (ZF2011-02) Description: SQL injection vulnerability in Zend Framework 1.10.x before 1.10.9 and 1.11.x before 1.11.6 when using non-ASCII-compatible encodings in conjunction PDO_MySql in PHP before 5.3.6. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/47919 - https://security-tracker.debian.org/tracker/CVE-2011-1939 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-1939 - https://access.redhat.com/security/cv
racker/CVE-2011-1939 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-1939 - https://access.redhat.com/security/cve/cve-2011-1939 - http://security.gentoo.org/glsa/glsa-201408-01.xml - https://framework.zend.com/security/advisory/ZF2011-02 - https://bugs.php.net/bug.php?id=47802
CVE ID: CVE-2011-1940 State: PUBLISHED Published: 2012-01-26T15:00:00 Last Updated: 2024-08-06T22:46:00.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.3.x before 3.3.10.1 and 3.4.x before 3.4.1 allow remote attackers to inject arbitrary web script or HTML via a crafted table name that triggers improper HTML rendering on a Tracking page, related to (1) libraries/tbl_links.inc.php and (2) tbl_tracking.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2012/dsa-2391 - http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commitdiff%3Bh
security/2012/dsa-2391 - http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commitdiff%3Bh=7e10c132a3887c8ebfd7a8eee356b28375f1e287 - http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commitdiff%3Bh=d3ccf798fdbd4f8a89d4088130637d8dee918492 - http://www.phpmyadmin.net/home_page/security/PMASA-2011-3.php
CVE ID: CVE-2011-1941 State: PUBLISHED Published: 2012-01-26T15:00:00Z Last Updated: 2024-09-16T17:08:15.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the redirector feature in phpMyAdmin 3.4.x before 3.4.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpmyadmin.net/home_page/security/PMASA-2011-4.php - http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commitdiff%3Bh=ecfc8ba4f7b4ea612c58ab5726054ed0f28e200d - http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=ph
%3Ba=commitdiff%3Bh=ecfc8ba4f7b4ea612c58ab5726054ed0f28e200d - http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commitdiff%3Bh=b7a8179eb6bf0f1643970ac57a70b5b513a1cd4f
CVE ID: CVE-2011-1942 State: REJECTED Published: 2021-06-23T14:06:48 Last Updated: 2021-06-23T14:06:48 Description: No description available.
CVE ID: CVE-2011-1943 State: PUBLISHED Published: 2011-06-14T17:00:00 Last Updated: 2024-08-06T22:46:00.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: The destroy_one_secret function in nm-setting-vpn.c in libnm-util in the NetworkManager package 0.8.999-3.git20110526 in Fedora 15 creates a log entry containing a certificate password, which allows local users to obtain sensitive information by reading a log file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=708876 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68057 - http://www.openwall.com/lists/oss-security/2011/05/31/6 - http://lists.fedoraproject.or
loud.com/vulnerabilities/68057 - http://www.openwall.com/lists/oss-security/2011/05/31/6 - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061329.html - http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=78ce088843d59d4494965bfc40b30a2e63d065f6 - http://www.openwall.com/lists/oss-security/2011/05/31/7
CVE ID: CVE-2011-1944 State: PUBLISHED Published: 2011-09-02T16:00:00 Last Updated: 2024-08-06T22:46:00.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1.8.16 and earlier, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted XML file that triggers a heap-based buffer overflow when adding a new namespace node, related to handling of XPath expressions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/48056 - http://secunia.com/advisories/44711 - http://www.mandriva.co
ner: References: - http://www.securityfocus.com/bid/48056 - http://secunia.com/advisories/44711 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:131 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://lists.opensuse.org/opensuse-updates/2011-07/msg00035.html - http://git.gnome.org/browse/libxml2/commit/?id=d7958b21e7f8c447a26bb2436f08402b2c308be4 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - https://bugzilla.redhat.com/show_bug.cgi?id=709747 - http://rhn.redhat.com/errata/RHSA-2013-0217.html - http://www.redhat.com/support/errata/RHSA-2011-1749.html - http://www.oracle.com
redhat.com/errata/RHSA-2013-0217.html - http://www.redhat.com/support/errata/RHSA-2011-1749.html - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://www.debian.org/security/2011/dsa-2255 - http://www.osvdb.org/73248 - http://scarybeastsecurity.blogspot.com/2011/05/libxml-vulnerability-and-interesting.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062238.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://www.openwall.com/lists/oss-security/2011/05/31/8 - http://support.apple.com/kb/HT5281 - http://lists.apple.com/archives/security-announce/2012/May/msg00001.html - http://ubuntu.com/usn/u
apple.com/kb/HT5281 - http://lists.apple.com/archives/security-announce/2012/May/msg00001.html - http://ubuntu.com/usn/usn-1153-1
CVE ID: CVE-2011-1945 State: PUBLISHED Published: 2011-05-31T20:00:00 Last Updated: 2024-08-06T22:46:00.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: The elliptic curve cryptography (ECC) subsystem in OpenSSL 1.0.0d and earlier, when the Elliptic Curve Digital Signature Algorithm (ECDSA) is used for the ECDHE_ECDSA cipher suite, does not properly implement curves over binary fields, which makes it easier for context-dependent attackers to determine private keys via a timing attack and a lattice calculation. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:136 - http://www.kb.cert.org/vuls/id/MAPG-8F
: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:136 - http://www.kb.cert.org/vuls/id/MAPG-8FENZ3 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:137 - http://www.debian.org/security/2011/dsa-2309 - http://support.apple.com/kb/HT5784 - http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html - https://hermes.opensuse.org/messages/8760466 - http://www.kb.cert.org/vuls/id/536044 - https://hermes.opensuse.org/messages/8764170 - http://secunia.com/advisories/44935 - http://eprint.iacr.org/2011/232.pdf
CVE ID: CVE-2011-1946 State: PUBLISHED Published: 2011-07-07T21:00:00 Last Updated: 2024-08-06T22:46:00.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: gnomesu-pam-backend in libgnomesu 1.0.0 prints an error message but proceeds with the non-error code path upon failure of the setgid or setuid function, which allows local users to gain privileges by leveraging access to two unprivileged user accounts, and running many processes under one of these accounts. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/05/31/11 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67720 - http://www.securityfocus.com/bid/48035 - h
/2011/05/31/11 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67720 - http://www.securityfocus.com/bid/48035 - https://bugzilla.novell.com/show_bug.cgi?id=695627 - http://openwall.com/lists/oss-security/2011/05/30/2
CVE ID: CVE-2011-1947 State: PUBLISHED Published: 2011-06-02T19:00:00 Last Updated: 2024-08-06T22:46:00.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: fetchmail 5.9.9 through 6.3.19 does not properly limit the wait time after issuing a (1) STARTTLS or (2) STLS request, which allows remote servers to cause a denial of service (application hang) by acknowledging the request but not sending additional packets. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/05/31/17 - http://www.securityfocus.com/bid/48043 - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061672.html - http://openwall.com/lists/oss
/48043 - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061672.html - http://openwall.com/lists/oss-security/2011/05/31/12 - http://openwall.com/lists/oss-security/2011/05/30/1 - http://www.securityfocus.com/archive/1/518251/100/0/threaded - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061634.html - http://gitorious.org/fetchmail/fetchmail/blobs/legacy_63/fetchmail-SA-2011-01.txt - http://www.securitytracker.com/id?1025605 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:107 - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061735.html - http://www.fetchmail.info/fetchmail-SA-2011-01.txt - http://openwall.com/lists/
package-announce/2011-June/061735.html - http://www.fetchmail.info/fetchmail-SA-2011-01.txt - http://openwall.com/lists/oss-security/2011/06/01/2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67700
CVE ID: CVE-2011-1948 State: PUBLISHED Published: 2011-06-06T19:00:00 Last Updated: 2024-08-06T22:46:00.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Plone 4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/44775 - http://www.securityfocus.com/bid/48005 - http://plone.org/products/plone/security/advisories/CVE-2011-1948 - http://osvdb.org/72727 - http://secunia.com/advisories/44776 - http://securityreason.com/securityalert/8269 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67693 - h
es/44776 - http://securityreason.com/securityalert/8269 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67693 - http://www.securityfocus.com/archive/1/518155/100/0/threaded
CVE ID: CVE-2011-1949 State: PUBLISHED Published: 2011-06-06T19:00:00 Last Updated: 2024-08-06T22:46:00.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the safe_html filter in Products.PortalTransforms in Plone 2.1 through 4.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-2422. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/72728 - http://secunia.com/advisories/44775 - http://plone.org/products/plone/security/advisories/CVE-2011-1949 - http://www.securityfocus.com/bid/48005 - http://secunia.com/advisories/44
ucts/plone/security/advisories/CVE-2011-1949 - http://www.securityfocus.com/bid/48005 - http://secunia.com/advisories/44776 - http://securityreason.com/securityalert/8269 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67694 - http://www.securityfocus.com/archive/1/518155/100/0/threaded
CVE ID: CVE-2011-1950 State: PUBLISHED Published: 2011-06-06T19:00:00 Last Updated: 2024-08-06T22:46:00.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: plone.app.users in Plone 4.0 and 4.1 allows remote authenticated users to modify the properties of arbitrary accounts via unspecified vectors, as exploited in the wild in June 2011. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/44775 - http://www.securityfocus.com/bid/48005 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67695 - http://osvdb.org/72729 - http://securityreason.com/securityalert/8269 - http://plone.org/products/plone/security/advisories/CVE-2011-1950 - http:
http://securityreason.com/securityalert/8269 - http://plone.org/products/plone/security/advisories/CVE-2011-1950 - http://www.securityfocus.com/archive/1/518155/100/0/threaded
CVE ID: CVE-2011-1951 State: PUBLISHED Published: 2011-07-11T20:00:00Z Last Updated: 2024-08-06T22:46:00.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/logmatcher.c in Balabit syslog-ng before 3.2.4, when the global flag is set and when using PCRE 8.12 and possibly other versions, allows remote attackers to cause a denial of service (memory consumption) via a message that does not match a regular expression. Additional Analyst Notes: - CVE Program Container: References: - http://git.balabit.hu/?p=bazsi/syslog-ng-3.2.git%3Ba=commit%3Bh=09710c0b105e579d35c7b5f6c66d1ea5e3a3d3ff - https://bugzilla.redhat.com/show_bug.cgi?id=709088 - http://www.openwall.com/lists/oss-security
c7b5f6c66d1ea5e3a3d3ff - https://bugzilla.redhat.com/show_bug.cgi?id=709088 - http://www.openwall.com/lists/oss-security/2011/05/26/1 - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/062107.html - http://www.securityfocus.com/bid/47800 - http://secunia.com/advisories/45122
CVE ID: CVE-2011-1952 State: PUBLISHED Published: 2011-06-06T19:00:00 Last Updated: 2024-08-06T22:46:00.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: common.php in Post Revolution before 0.8.0c-2 allows remote attackers to cause a denial of service (infinite loop) via malformed HTML markup, as demonstrated by an a< sequence. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/518205/100/0/threaded - http://www.securityfocus.com/bid/47967 - http://javierb.com.ar/2011/06/01/postrev-vunls/ - http://securityreason.com/securityalert/8270 - http://postrev.com.ar/verpost.php?id_noticia=59
CVE ID: CVE-2011-1953 State: PUBLISHED Published: 2011-06-06T19:00:00 Last Updated: 2024-08-06T22:46:00.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in common.php in Post Revolution before 0.8.0c-2 allow remote attackers to inject arbitrary web script or HTML via an attribute of a (1) P, a (2) STRONG, a (3) A, a (4) EM, a (5) I, a (6) IMG, a (7) LI, an (8) OL, a (9) VIDEO, or a (10) BLOCKQUOTE element. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/518205/100/0/threaded - http://www.securityfocus.com/bid/47967 - http://javierb.com.ar/2011/06/01/postrev-vunls/ - http
/518205/100/0/threaded - http://www.securityfocus.com/bid/47967 - http://javierb.com.ar/2011/06/01/postrev-vunls/ - http://securityreason.com/securityalert/8270 - http://postrev.com.ar/verpost.php?id_noticia=59
CVE ID: CVE-2011-1954 State: PUBLISHED Published: 2011-06-06T19:00:00 Last Updated: 2024-08-06T22:46:00.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Post Revolution 0.8.0c-2 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests to (1) ajax-weblog-guardar.php, (2) verpost.php, (3) comments.php, or (4) perfil.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/518205/100/0/threaded - http://osvdb.org/72641 - http://javierb.com.ar/2011/06/01/postrev-vunls/ - http://secunia.com/advisories/44710 - http://securityreason.
g/72641 - http://javierb.com.ar/2011/06/01/postrev-vunls/ - http://secunia.com/advisories/44710 - http://securityreason.com/securityalert/8270 - http://postrev.com.ar/verpost.php?id_noticia=59
CVE ID: CVE-2011-1955 State: REJECTED Published: 2021-06-23T14:07:29 Last Updated: 2021-06-23T14:07:29 Description: No description available.
CVE ID: CVE-2011-1956 State: PUBLISHED Published: 2011-06-06T19:00:00 Last Updated: 2024-08-06T22:46:00.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bytes_repr_len function in Wireshark 1.4.5 uses an incorrect pointer argument, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via arbitrary TCP traffic. Additional Analyst Notes: - CVE Program Container: References: - http://www.wireshark.org/news/20110418.html - http://openwall.com/lists/oss-security/2011/05/31/19 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14943 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14943 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67789 - http://openwall.com/lists/oss-security/2011/06/01/9 - http://secunia.com/advisories/44449 - http://www.wireshark.org/docs/relnotes/wireshark-1.4.6.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5837
CVE ID: CVE-2011-1957 State: PUBLISHED Published: 2011-06-06T19:00:00 Last Updated: 2024-08-06T22:46:00.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_dcm_main function in epan/dissectors/packet-dcm.c in the DICOM dissector in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service (infinite loop) via an invalid PDU length. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/44958 - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061437.html - http://www.wireshark.org/security/wnpa-sec-2011-07.html - http://anonsvn.wireshark.org/viewvc?view=revision&re
37.html - http://www.wireshark.org/security/wnpa-sec-2011-07.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=36958 - http://secunia.com/advisories/48947 - http://www.securityfocus.com/bid/48066 - http://www.wireshark.org/security/wnpa-sec-2011-08.html - http://www.debian.org/security/2011/dsa-2274 - http://secunia.com/advisories/44449 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14325 - http://openwall.com/lists/oss-security/2011/06/01/11 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5876 - http://openwall.com/lists/oss-security/2011/06/01/1 - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061290.html
l.com/lists/oss-security/2011/06/01/1 - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061290.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/67790 - http://openwall.com/lists/oss-security/2011/05/31/20 - https://bugzilla.redhat.com/show_bug.cgi?id=710021 - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061477.html - http://secunia.com/advisories/45149
CVE ID: CVE-2011-1958 State: PUBLISHED Published: 2011-06-06T19:00:00 Last Updated: 2024-08-06T22:46:00.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows user-assisted remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted Diameter dictionary file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/44958 - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061437.html - http://www.wireshark.org/security/wnpa-sec-2011-07.html - http://rhn.redhat.com/errata/RHSA-2013-0125.html - http://secunia.com/advisories
rk.org/security/wnpa-sec-2011-07.html - http://rhn.redhat.com/errata/RHSA-2013-0125.html - http://secunia.com/advisories/48947 - http://www.securityfocus.com/bid/48066 - http://www.wireshark.org/security/wnpa-sec-2011-08.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/67791 - http://www.debian.org/security/2011/dsa-2274 - http://secunia.com/advisories/44449 - https://bugzilla.redhat.com/show_bug.cgi?id=710184 - http://openwall.com/lists/oss-security/2011/06/01/11 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15045 - http://openwall.com/lists/oss-security/2011/06/01/1 - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/0
p://openwall.com/lists/oss-security/2011/06/01/1 - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061290.html - http://openwall.com/lists/oss-security/2011/05/31/20 - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061477.html - http://secunia.com/advisories/45149
CVE ID: CVE-2011-1959 State: PUBLISHED Published: 2011-06-06T19:00:00 Last Updated: 2024-08-06T22:46:00.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: The snoop_read function in wiretap/snoop.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 does not properly handle certain virtualizable buffers, which allows remote attackers to cause a denial of service (application crash) via a large length value in a snoop file that triggers a stack-based buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/67792 - http://secunia.com/advisories/44958 - http://lists.fedoraproject.org/pipermail/packag
mcloud.com/vulnerabilities/67792 - http://secunia.com/advisories/44958 - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061437.html - http://www.wireshark.org/security/wnpa-sec-2011-07.html - http://rhn.redhat.com/errata/RHSA-2013-0125.html - https://bugzilla.redhat.com/show_bug.cgi?id=710039 - http://secunia.com/advisories/48947 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5912 - http://www.securityfocus.com/bid/48066 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=37068 - http://www.wireshark.org/security/wnpa-sec-2011-08.html - http://www.debian.org/security/2011/dsa-2274 - http://secunia.com/advisories/44449 - http://openwall.com/lists/oss-secur