Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
sec-2012-03.html - http://secunia.com/advisories/54425 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=40266 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15324 - http://www.openwall.com/lists/oss-security/2012/01/11/7 - http://secunia.com/advisories/47494 - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6391 - http://www.securitytracker.com/id?1026508
CVE ID: CVE-2012-0044 State: PUBLISHED Published: 2012-05-17T10:00:00 Last Updated: 2024-08-06T18:09:17.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the drm_mode_dirtyfb_ioctl function in drivers/gpu/drm/drm_crtc.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 3.1.5 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1556-1 - http://rhn.redhat.com/errata/RHSA-2012-0743.html - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.5 - http://www.ubuntu.com/usn/USN-1555-
/RHSA-2012-0743.html - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.5 - http://www.ubuntu.com/usn/USN-1555-1 - http://www.openwall.com/lists/oss-security/2012/01/12/1 - http://www.securityfocus.com/bid/51371 - https://bugzilla.redhat.com/show_bug.cgi?id=772894 - https://github.com/torvalds/linux/commit/a5cd335165e31db9dbab636fd29895d41da55dd2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a5cd335165e31db9dbab636fd29895d41da55dd2
CVE ID: CVE-2012-0045 State: PUBLISHED Published: 2012-07-03T16:00:00 Last Updated: 2024-08-06T18:09:17.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: The em_syscall function in arch/x86/kvm/emulate.c in the KVM implementation in the Linux kernel before 3.2.14 does not properly handle the 0f05 (aka syscall) opcode, which allows guest OS users to cause a denial of service (guest OS crash) via a crafted application, as demonstrated by an NASM file. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.14 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c2226fc9e87ba3da060e4733
ngeLog-3.2.14 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c2226fc9e87ba3da060e47333657cd6616652b84 - https://bugzilla.redhat.com/show_bug.cgi?id=773370 - http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html - http://www.openwall.com/lists/oss-security/2012/01/12/2 - https://github.com/torvalds/linux/commit/c2226fc9e87ba3da060e47333657cd6616652b84
CVE ID: CVE-2012-0046 State: PUBLISHED Published: 2019-10-29T13:09:39 Last Updated: 2024-08-06T18:09:17.356Z Vendors: mediawiki Products: mediawiki Problem Types: info leak Description: mediawiki allows deleted text to be exposed Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-0046 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-0046 - https://access.redhat.com/security/cve/cve-2012-0046
CVE ID: CVE-2012-0047 State: PUBLISHED Published: 2012-03-23T18:00:00 Last Updated: 2024-08-06T18:09:17.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Apache Wicket 1.4.x before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via the wicket:pageMapName parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74273 - http://archives.neohapsis.com/archives/bugtraq/2012-03/0112.html - http://osvdb.org/80300 - http://www.securitytracker.com/id?1026839 - http://wicket.apache.org/2012/03/22/wicket-cve-2012-0047.html
CVE ID: CVE-2012-0048 State: PUBLISHED Published: 2012-08-25T10:00:00Z Last Updated: 2024-09-16T20:27:57.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenTTD 0.3.5 through 1.1.4 allows remote attackers to cause a denial of service (game pause) by connecting to the server and not finishing the (1) authorization phase or (2) map download, aka a "slow read" attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/01/13/8 - http://www.tt-forums.net/viewtopic.php?f=33&t=58073&hilit=pause#p989303 - http://bugs.openttd.org/task/4955 - http://security.openttd.org/en/CVE-2012-0049 - http://www.debian.org/security/2012/
http://bugs.openttd.org/task/4955 - http://security.openttd.org/en/CVE-2012-0049 - http://www.debian.org/security/2012/dsa-2524 - http://secunia.com/advisories/50137 - http://vcs.openttd.org/svn/changeset/23764 - http://www.openwall.com/lists/oss-security/2012/01/07/2
CVE ID: CVE-2012-0049 State: PUBLISHED Published: 2019-11-07T17:13:26 Last Updated: 2024-08-06T18:09:17.244Z Vendors: openttd Products: openttd Problem Types: Other Description: OpenTTD before 1.1.5 contains a Denial of Service (slow read attack) that prevents users from joining the server. Additional Analyst Notes: - CVE Program Container: References: - http://security.openttd.org/en/CVE-2012-0049 - https://security-tracker.debian.org/tracker/CVE-2012-0049 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-0049 - http://www.debian.org/security/2012/dsa-2524 - http://www.openwall.com/lists/oss-security/2012/01/13/9
CVE ID: CVE-2012-0050 State: PUBLISHED Published: 2012-01-19T19:00:00 Last Updated: 2024-08-06T18:09:17.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote attackers to cause a denial of service (crash) via unspecified vectors related to an out-of-bounds read. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4108. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48528 - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:011 - http://secunia.com/advisori
iew.wss?uid=ssg1S1004564 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:011 - http://secunia.com/advisories/47755 - http://www.securitytracker.com/id?1026548 - http://osvdb.org/78320 - http://support.apple.com/kb/HT5784 - http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html - http://www.securityfocus.com/bid/51563 - http://www.debian.org/security/2012/dsa-2392 - http://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03169289 - http://marc.info/?l=bugtraq&m=134039053214295&w=2 - http://secunia.com/advisories/57353 - http://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03169289 - http://secunia.com/advisories/
http://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03169289 - http://secunia.com/advisories/47631 - http://marc.info/?l=bugtraq&m=134039053214295&w=2 - http://marc.info/?l=bugtraq&m=133951357207000&w=2 - http://secunia.com/advisories/47677 - http://marc.info/?l=bugtraq&m=133951357207000&w=2 - http://www.openssl.org/news/secadv_20120118.txt - http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc
CVE ID: CVE-2012-0051 State: PUBLISHED Published: 2019-11-07T17:23:10 Last Updated: 2024-08-06T18:09:17.245Z Vendors: tahoe-lafs Products: tahoe-lafs Problem Types: General Design Problem Description: Tahoe-LAFS 1.9.0 fails to ensure integrity which allows remote attackers to corrupt mutable files or directories upon retrieval. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-0051 - http://www.openwall.com/lists/oss-security/2012/01/15/11 - http://www.openwall.com/lists/oss-security/2012/01/26/7 - http://www.openwall.com/lists/oss-security/2012/01/26/8 - http://www.openwall.com/lists/oss-security/2012/01/26/9 - https://taho
ww.openwall.com/lists/oss-security/2012/01/26/8 - http://www.openwall.com/lists/oss-security/2012/01/26/9 - https://tahoe-lafs.org/trac/tahoe-lafs/ticket/1654
CVE ID: CVE-2012-0052 State: PUBLISHED Published: 2014-02-14T15:00:00 Last Updated: 2024-08-06T18:09:17.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat JBoss Operations Network (JON) before 2.4.2 and 3.0.x before 3.0.1 does not check the JON agent key, which allows remote attackers to spoof the identity of arbitrary agents via the registered agent name. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=781964 - http://rhn.redhat.com/errata/RHSA-2012-0089.html - http://rhn.redhat.com/errata/RHSA-2012-0406.html
CVE ID: CVE-2012-0053 State: PUBLISHED Published: 2012-01-28T02:00:00 Last Updated: 2024-08-06T18:09:17.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows remote attackers to obtain the values of HTTPOnly cookies via vectors involving a (1) long or (2) malformed header in conjunction with crafted web script. Additional Analyst Notes: - CVE Program Container: References: - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://www.mandriva.com/security/advisories?name=M
.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:012 - http://www.securityfocus.com/bid/51706 - http://marc.info/?l=bugtraq&m=136441204617335&w=2 - http://rhn.redhat.com/errata/RHSA-2012-0543.html - http://marc.info/?l=bugtraq&m=133294460209056&w=2 - http://rhn.redhat.com/errata/RHSA-2012-0128.html - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://marc.info/?l=bugtraq&m=136441204617335&w=2 - http://marc.info/?l=bugtraq&m=133294460209056&w=2 - http://rhn.redhat.com/errata/RHSA-2012-0542.html - http://httpd.apache.org/security/vulnerabilities_22.html - http://lists.apple.com/arch
.com/errata/RHSA-2012-0542.html - http://httpd.apache.org/security/vulnerabilities_22.html - http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html - http://support.apple.com/kb/HT5501 - http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html - https://bugzilla.redhat.com/show_bug.cgi?id=785069 - http://marc.info/?l=bugtraq&m=133951357207000&w=2 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://marc.info/?l=bugtraq&m=133951357207000&w=2 - http://marc.info/?l=bugtraq&m=133494237717847&w=2 - http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00026.html - http://www.mandriva.com/security/advisories?name=MD
ists.opensuse.org/opensuse-security-announce/2012-02/msg00026.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 - http://secunia.com/advisories/48551 - http://svn.apache.org/viewvc?view=revision&revision=1235454 - http://www.debian.org/security/2012/dsa-2405 - http://marc.info/?l=bugtraq&m=133494237717847&w=2 - http://kb.juniper.net/JSA10585 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00002.html - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E - https:
ts.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e274
b8fc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9b4b963760a3cb5a4a70c902f325c6c0337fe51d5b8570416f8f8729%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.ht
4b963760a3cb5a4a70c902f325c6c0337fe51d5b8570416f8f8729%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r05b5357d1f6bd106f41541ee7d87aafe3f5ea4dc3e9bde5ce09baff8%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r1d201e3da31a2c8aa870c8314623caef7debd74a13d0f25205e26f15%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.
.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac
3b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2012-0054 State: PUBLISHED Published: 2012-03-19T19:00:00Z Last Updated: 2024-09-16T19:25:07.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: libs/updater.py in GoLismero 0.6.3, and other versions before Git revision 2b3bb43d6867, as used in backtrack and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on GoLismero-controlled files, as demonstrated using Admin/changes.dat. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/78472 - http://www.openwall.com/lists/oss-security/2012/01/17/10 - http://www.openwall.com/lists/oss-security/2012/01/17/7 - http://code.google.com/p/golismero/sourc
urity/2012/01/17/10 - http://www.openwall.com/lists/oss-security/2012/01/17/7 - http://code.google.com/p/golismero/source/detail?r=2b3bb43d68676efd687361f7de29380189031ab8
CVE ID: CVE-2012-0055 State: PUBLISHED Published: 2020-02-19T17:28:53 Last Updated: 2024-08-06T18:09:17.246Z Vendors: Linux kernel Products: OverlayFS Problem Types: UNKNOWN_TYPE Description: OverlayFS in the Linux kernel before 3.0.0-16.28, as used in Ubuntu 10.0.4 LTS and 11.10, is missing inode security checks which could allow attackers to bypass security restrictions and perform unauthorized actions. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/01/17/11 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-0055 - https://access.redhat.com/security/cve/cve-2012-0055 - http://www.ubuntu.com/usn/USN-1363-1 - http://www.ubun
012-0055 - https://access.redhat.com/security/cve/cve-2012-0055 - http://www.ubuntu.com/usn/USN-1363-1 - http://www.ubuntu.com/usn/USN-1364-1 - http://www.ubuntu.com/usn/USN-1384-1 - https://bugs.launchpad.net/ubuntu/+source/linux/+bug/915941
CVE ID: CVE-2012-0056 State: PUBLISHED Published: 2012-01-27T15:00:00 Last Updated: 2024-08-06T18:09:17.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when writing to /proc/<pid>/mem, which allows local users to gain privileges by modifying process memory, as demonstrated by Mempodipper. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51625 - http://blog.zx2c4.com/749 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=e268337dfe26dfc7efd422a804dbb27977a3cccc - http://ubuntu.com
=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=e268337dfe26dfc7efd422a804dbb27977a3cccc - http://ubuntu.com/usn/usn-1336-1 - http://www.redhat.com/support/errata/RHSA-2012-0052.html - http://secunia.com/advisories/47708 - http://www.openwall.com/lists/oss-security/2012/01/19/4 - http://www.openwall.com/lists/oss-security/2012/01/18/2 - http://www.redhat.com/support/errata/RHSA-2012-0061.html - http://www.openwall.com/lists/oss-security/2012/01/18/1 - http://www.openwall.com/lists/oss-security/2012/01/22/4 - https://bugzilla.redhat.com/show_bug.cgi?id=782642 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.2 - http://www.kb.cert.org/vuls/id/470151
CVE ID: CVE-2012-0057 State: PUBLISHED Published: 2012-02-02T00:00:00 Last Updated: 2024-08-06T18:09:17.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP before 5.3.9 has improper libxslt security settings, which allows remote attackers to create arbitrary files via a crafted XSLT stylesheet that uses the libxslt output extension. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2012/01/15/1 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://openwall.com/lists/oss-security/2012/01/13/6 - http://openwall.com/lists/oss-security/2012/01/13/5 - http://www.debian.org/security/2012/dsa
ss-security/2012/01/13/6 - http://openwall.com/lists/oss-security/2012/01/13/5 - http://www.debian.org/security/2012/dsa-2399 - http://openwall.com/lists/oss-security/2012/01/18/3 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00013.html - http://php.net/ChangeLog-5.php#5.3.9 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00001.html - http://openwall.com/lists/oss-security/2012/01/13/7 - http://secunia.com/advisories/48668 - http://openwall.com/lists/oss-security/2012/01/15/2 - http://openwall.com/lists/oss-security/2012/01/15/10 - http://openwall.com/lists/oss-security/2012/01/
ty/2012/01/15/2 - http://openwall.com/lists/oss-security/2012/01/15/10 - http://openwall.com/lists/oss-security/2012/01/14/1 - http://openwall.com/lists/oss-security/2012/01/14/2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72908 - http://openwall.com/lists/oss-security/2012/01/14/3 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://openwall.com/lists/oss-security/2012/01/13/4 - https://bugs.php.net/bug.php?id=54446 - http://openwall.com/lists/oss-security/2012/01/13/10
CVE ID: CVE-2012-0058 State: PUBLISHED Published: 2012-05-17T10:00:00 Last Updated: 2024-08-06T18:09:17.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kiocb_batch_free function in fs/aio.c in the Linux kernel before 3.2.2 allows local users to cause a denial of service (OOPS) via vectors that trigger incorrect iocb management. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/802f43594d6e4d2ac61086d239153c17873a0428 - http://www.securitytracker.com/id?1027085 - https://bugzilla.redhat.com/show_bug.cgi?id=782696 - http://www.openwall.com/lists/oss-security/2012/01/18/7 - http://www.kernel.org/pub/linux/kernel/v3.x/Ch
cgi?id=782696 - http://www.openwall.com/lists/oss-security/2012/01/18/7 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.2 - http://marc.info/?l=bugtraq&m=139447903326211&w=2
CVE ID: CVE-2012-0059 State: PUBLISHED Published: 2014-02-05T18:00:00 Last Updated: 2024-08-06T18:09:17.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: Spacewalk-backend in Red Hat Network (RHN) Satellite and Proxy 5.4 includes cleartext user passwords in an error message when a system registration XML-RPC call fails, which allows remote administrators to obtain the password by reading (1) the server log and (2) an email. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-0101.html - http://rhn.redhat.com/errata/RHSA-2012-0102.html
CVE ID: CVE-2012-0060 State: PUBLISHED Published: 2012-06-04T20:00:00 Last Updated: 2024-08-06T18:09:17.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an invalid region tag in a package header to the (1) headerLoad, (2) rpmReadSignature, or (3) headerVerify function. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://rhn.redhat.com/errata/RHSA-2012-0531.html - http://www.mandriva.com/security/advisories?name=
2016-3090546.html - http://rhn.redhat.com/errata/RHSA-2012-0531.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:056 - http://www.securitytracker.com/id?1026882 - http://rpm.org/wiki/Releases/4.9.1.3 - http://secunia.com/advisories/48716 - http://www.osvdb.org/81010 - https://bugzilla.redhat.com/show_bug.cgi?id=744858 - http://secunia.com/advisories/48651 - http://rhn.redhat.com/errata/RHSA-2012-0451.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078907.html - http://rpm.org/gitweb?p=rpm.git%3Ba=commitdiff%3Bh=e4eab2bc6d07cfd33f740071de7ddbb2fe2f4190 - http://www.securityfocus.com/bid/52865 - http://rpm.org/gitweb?p=rpm.git%3Ba=commitdiff%3Bh=f2
f740071de7ddbb2fe2f4190 - http://www.securityfocus.com/bid/52865 - http://rpm.org/gitweb?p=rpm.git%3Ba=commitdiff%3Bh=f23998251992b8ae25faf5113c42fee2c49c7f29 - http://www.ubuntu.com/usn/USN-1695-1 - https://hermes.opensuse.org/messages/14440932 - http://secunia.com/advisories/49110 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74582 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078819.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077960.html - https://hermes.opensuse.org/messages/14441362
CVE ID: CVE-2012-0061 State: PUBLISHED Published: 2012-06-04T20:00:00 Last Updated: 2024-08-06T18:09:17.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region tags, which allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large region size in a package header. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://rhn.redhat.com/errata/RHSA-2012-0531.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:056 - ht