Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ry/035070.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:198 - http://www.securityfocus.com/bid/38144 - http://secunia.com/advisories/38779 - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html - http://www.openwall.com/lists/oss-security/2010/02/07/1 - http://secunia.com/advisories/38922 - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00006.html - http://www.debian.org/security/2010/dsa-1996 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035159.html - http://secunia.com/advisories/43315 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:066 - http://secunia.com/advisories/39033 - http://www.vm
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:066 - http://secunia.com/advisories/39033 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - http://www.openwall.com/lists/oss-security/2010/02/08/2 - http://www.debian.org/security/2010/dsa-2005 - http://www.securityfocus.com/archive/1/516397/100/0/threaded - http://secunia.com/advisories/38492 - https://bugzilla.redhat.com/show_bug.cgi?id=562582 - http://www.redhat.com/support/errata/RHSA-2010-0161.html
CVE ID: CVE-2010-0416 State: PUBLISHED Published: 2010-02-18T23:00:00 Last Updated: 2024-08-07T00:45:12.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Unescape function in common/util/hxurl.cpp and player/hxclientkit/src/CHXClientSink.cpp in Helix Player 1.0.6 and RealPlayer allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a URL argument containing a % (percent) character that is not followed by two hex digits. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0094.html - https://helixcommunity.org/viewcvs/common/util/hxurl.cpp?v
- http://www.redhat.com/support/errata/RHSA-2010-0094.html - https://helixcommunity.org/viewcvs/common/util/hxurl.cpp?view=log#rev1.24.4.1.4.1 - http://lists.helixcommunity.org/pipermail/common-cvs/2007-July/014956.html - http://secunia.com/advisories/38450 - https://bugzilla.redhat.com/show_bug.cgi?id=561856 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10847
CVE ID: CVE-2010-0417 State: PUBLISHED Published: 2010-02-18T23:00:00 Last Updated: 2024-08-07T00:45:12.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in common/util/rlstate.cpp in Helix Player 1.0.6 and RealPlayer allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a RuleBook structure with a large number of rule-separator characters that trigger heap memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0094.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11364 - http://secunia
094.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11364 - http://secunia.com/advisories/38450 - http://lists.helixcommunity.org/pipermail/common-cvs/2008-January/015484.html - https://helixcommunity.org/viewcvs/common/util/rlstate.cpp?view=log#rev1.10 - https://bugzilla.redhat.com/show_bug.cgi?id=561860
CVE ID: CVE-2010-0418 State: PUBLISHED Published: 2010-03-09T19:00:00 Last Updated: 2024-08-07T00:45:12.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface in chumby one before 1.0.4 and chumby classic before 1.7.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a request. Additional Analyst Notes: - CVE Program Container: References: - http://www.chumby.com/pages/release10mar - http://secunia.com/advisories/38972 - http://www.awe.com/mark/blog/20100305.html
CVE ID: CVE-2010-0419 State: PUBLISHED Published: 2010-03-05T16:00:00 Last Updated: 2024-08-07T00:45:12.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing (SMP), does not properly restrict writing of segment selectors to segment registers, which might allow guest OS users to cause a denial of service (guest OS crash) or gain privileges on the guest OS by leveraging access to a (1) IO port or (2) MMIO region, and replacing an instruction in between emulator entry and instruction fetch. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38467 - https:
fetch. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38467 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56662 - http://www.redhat.com/support/errata/RHSA-2010-0126.html - https://bugzilla.redhat.com/show_bug.cgi?id=563463 - http://securitytracker.com/id?1023663 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10139
CVE ID: CVE-2010-0420 State: PUBLISHED Published: 2010-02-24T18:00:00 Last Updated: 2024-08-07T00:45:12.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: libpurple in Finch in Pidgin before 2.6.6, when an XMPP multi-user chat (MUC) room is used, does not properly parse nicknames containing <br> sequences, which allows remote attackers to cause a denial of service (application crash) via a crafted nickname. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035332.html - http://www.securityfocus.com/bid/38294 - https://bugzilla.redhat.com/show_bug.cgi?id=565786 - https://rhn.redhat.com/errata/R
//www.securityfocus.com/bid/38294 - https://bugzilla.redhat.com/show_bug.cgi?id=565786 - https://rhn.redhat.com/errata/RHSA-2010-0115.html - http://www.vupen.com/english/advisories/2010/0413 - http://secunia.com/advisories/38563 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:085 - http://www.ubuntu.com/usn/USN-902-1 - http://secunia.com/advisories/38640 - http://www.vupen.com/english/advisories/2010/0914 - http://secunia.com/advisories/38658 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18230 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035347.html - http://www.vupen.com/english/advisories/2010/1020 - http
ject.org/pipermail/package-announce/2010-February/035347.html - http://www.vupen.com/english/advisories/2010/1020 - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035409.html - http://www.osvdb.org/62439 - http://www.debian.org/security/2010/dsa-2038 - http://secunia.com/advisories/38712 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56399 - http://pidgin.im/news/security/?id=44 - http://secunia.com/advisories/39509 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11485 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:041 - http://
finition/oval%3Aorg.mitre.oval%3Adef%3A11485 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:041 - http://secunia.com/advisories/38915 - http://developer.pidgin.im/wiki/ChangeLog
CVE ID: CVE-2010-0421 State: PUBLISHED Published: 2010-03-18T17:12:00 Last Updated: 2024-08-07T00:45:12.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in the hb_ot_layout_build_glyph_classes function in pango/opentype/hb-ot-layout.cc in Pango before 1.27.1 allows context-dependent attackers to cause a denial of service (application crash) via a crafted font file, related to building a synthetic Glyph Definition (aka GDEF) table by using this font's charmap and the Unicode property database. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2010:121 - http://www.vupen.com/english/advisorie
: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2010:121 - http://www.vupen.com/english/advisories/2010/1552 - https://bugzilla.redhat.com/show_bug.cgi?id=555831 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9417 - http://ftp.gnome.org/pub/GNOME/sources/pango/1.27/pango-1.27.1.tar.bz2 - http://secunia.com/advisories/39041 - http://www.debian.org/security/2010/dsa-2019 - http://www.redhat.com/support/errata/RHSA-2010-0140.html - http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html - http://www.vupen.com/english/advisories/2010/0661 - http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.htm
//www.vupen.com/english/advisories/2010/0661 - http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html - http://www.securityfocus.com/bid/38760 - http://www.vupen.com/english/advisories/2010/0627 - http://securitytracker.com/id?1023711
CVE ID: CVE-2010-0422 State: PUBLISHED Published: 2010-02-24T18:00:00 Last Updated: 2024-08-07T00:45:12.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: gnome-screensaver 2.28.x before 2.28.3 does not properly synchronize the state of screen locking and the unlock dialog in situations involving a change to the number of monitors, which allows physically proximate attackers to bypass screen locking and access an unattended workstation by connecting and disconnecting monitors multiple times, a related issue to CVE-2010-0414. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=564464 - https://bugzilla.gnome.org/show_bug.cg
ram Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=564464 - https://bugzilla.gnome.org/show_bug.cgi?id=609789 - http://marc.info/?l=oss-security&m=126601292400764&w=2 - http://ftp.gnome.org/pub/GNOME/sources/gnome-screensaver/2.28/gnome-screensaver-2.28.3.news - https://exchange.xforce.ibmcloud.com/vulnerabilities/56364 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035115.html - http://secunia.com/advisories/38565 - http://git.gnome.org/browse/gnome-screensaver/commit/?id=d4dcbd65a2df3c093c4e3a74bbbc75383eb9eadb - http://secunia.com/advisories/38583 - http://git.gnome.org/browse/gnome-screensaver/commit/?id=271ae93d7b140b8ba40d77f9e4ce894e5fd
unia.com/advisories/38583 - http://git.gnome.org/browse/gnome-screensaver/commit/?id=271ae93d7b140b8ba40d77f9e4ce894e5fd1b554 - http://www.securityfocus.com/bid/38248 - http://git.gnome.org/browse/gnome-screensaver/commit/?id=f93a22c175090cf02e80bc3ee676b53f1251f685
CVE ID: CVE-2010-0423 State: PUBLISHED Published: 2010-02-24T18:00:00 Last Updated: 2024-08-07T00:45:12.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: gtkimhtml.c in Pidgin before 2.6.6 allows remote attackers to cause a denial of service (CPU consumption and application hang) by sending many smileys in a (1) IM or (2) chat. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035332.html - http://www.securityfocus.com/bid/38294 - https://rhn.redhat.com/errata/RHSA-2010-0115.html - http://www.osvdb.org/62440 - http://www.vupen.com/english/advisories/2010/0413 - http://secunia.com/advisories/3
.html - http://www.osvdb.org/62440 - http://www.vupen.com/english/advisories/2010/0413 - http://secunia.com/advisories/38563 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:085 - http://www.ubuntu.com/usn/USN-902-1 - http://secunia.com/advisories/38640 - http://www.vupen.com/english/advisories/2010/0914 - http://secunia.com/advisories/38658 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9842 - http://pidgin.im/news/security/?id=45 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035347.html - http://www.vupen.com/english/advisories/2010/1020 - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004
ttp://www.vupen.com/english/advisories/2010/1020 - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035409.html - http://www.debian.org/security/2010/dsa-2038 - http://secunia.com/advisories/38712 - https://bugzilla.redhat.com/show_bug.cgi?id=565792 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56394 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17554 - http://secunia.com/advisories/39509 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:041 - http://secunia.com/advisories/38915 - http://developer.pidgin.im/wiki/ChangeLog
CVE ID: CVE-2010-0424 State: PUBLISHED Published: 2010-02-25T19:00:00 Last Updated: 2024-08-07T00:45:12.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: The edit_cmd function in crontab.c in (1) cronie before 1.4.4 and (2) Vixie cron (vixie-cron) allows local users to change the modification times of arbitrary files, and consequently cause a denial of service, via a symlink attack on a temporary file in the /tmp directory. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=565809 - http://secunia.com/advisories/38700 - http://git.fedorahosted.org/git/cronie.git?p=cronie.git%3Ba=commit%3Bh=9e4a8fa5f9171fb724981f53879c9b2
dvisories/38700 - http://git.fedorahosted.org/git/cronie.git?p=cronie.git%3Ba=commit%3Bh=9e4a8fa5f9171fb724981f53879c9b20264aeb61 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035762.html - http://secunia.com/advisories/38741 - http://secunia.com/advisories/48104 - http://www.securityfocus.com/bid/38391
CVE ID: CVE-2010-0425 State: PUBLISHED Published: 2010-03-05T19:00:00 Last Updated: 2024-08-07T00:45:12.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2.3.x before 2.3.7, when running on Windows, does not ensure that request processing is complete before calling isapi_unload for an ISAPI .dll module, which allows remote attackers to execute arbitrary code via unspecified vectors related to a crafted request, a reset packet, and "orphaned callback pointers." Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/adviso
llback pointers." Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2010-0014.html - http://secunia.com/advisories/39628 - http://www.vupen.com/english/advisories/2010/0634 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM12247 - http://www.securitytracker.com/id?1023701 - http://www.securityfocus.com/bid/38494 - http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html - http://www-01.ibm.com/support/docview.wss?uid=swg1PM09447 - http://httpd.apache.org/security/vulnerabilities_20.html - http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/arch/win32/mod_isapi.c?r1=917870&r2=917869&pathrev=917870 - http://
tp://svn.apache.org/viewvc/httpd/httpd/trunk/modules/arch/win32/mod_isapi.c?r1=917870&r2=917869&pathrev=917870 - http://www.kb.cert.org/vuls/id/280613 - http://secunia.com/advisories/38978 - http://lists.vmware.com/pipermail/security-announce/2010/000105.html - http://httpd.apache.org/security/vulnerabilities_22.html - http://svn.apache.org/viewvc?view=revision&revision=917870 - http://svn.apache.org/viewvc/httpd/httpd/trunk/CHANGES?r1=917870&r2=917869&pathrev=917870 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8439 - http://www.senseofsecurity.com.au/advisories/SOS-10-002 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56624 - http://www.vu
enseofsecurity.com.au/advisories/SOS-10-002 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56624 - http://www.vupen.com/english/advisories/2010/0994 - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://www.exploit-db.com/exploits/11650
d9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://www.exploit-db.com/exploits/11650 - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d
84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.or
ad.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3
ttpd.apache.org%3E - https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2010-0426 State: PUBLISHED Published: 2010-02-24T18:00:00 Last Updated: 2024-08-07T00:45:12.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4, when a pseudo-command is enabled, permits a match between the name of the pseudo-command and the name of an executable file in an arbitrary directory, which allows local users to gain privileges via a crafted executable file, as demonstrated by a file named sudoedit in a user's home directory. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38803 - ftp://ftp.sudo.ws/pub/sudo/sudo-1.6.9p21.patch.gz - http://sudo.ws/repos/sudo/rev
http://secunia.com/advisories/38803 - ftp://ftp.sudo.ws/pub/sudo/sudo-1.6.9p21.patch.gz - http://sudo.ws/repos/sudo/rev/88f3181692fe - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7238 - http://www.gentoo.org/security/en/glsa/glsa-201003-01.xml - http://www.mandriva.com/security/advisories?name=MDVSA-2010:049 - http://lists.fedoraproject.org/pipermail/package-announce/2010-May/040578.html - http://secunia.com/advisories/38762 - http://www.debian.org/security/2010/dsa-2006 - http://secunia.com/advisories/39399 - http://www.securityfocus.com/bid/38362 - http://lists.fedoraproject.org/pipermail/package-announce/2010-May/040588.html - http://www.securit
ocus.com/bid/38362 - http://lists.fedoraproject.org/pipermail/package-announce/2010-May/040588.html - http://www.securityfocus.com/archive/1/514489/100/0/threaded - http://www.ubuntu.com/usn/USN-905-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10814 - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html - http://www.vupen.com/english/advisories/2010/0949 - http://sudo.ws/bugs/show_bug.cgi?id=389 - http://wiki.rpath.com/Advisories:rPSA-2010-0075 - http://www.vupen.com/english/advisories/2010/0450 - http://www.sudo.ws/sudo/stable.html - http://secunia.com/advisories/38659 - http://secunia.com/advisories/38795 - http://bugs.deb
w.sudo.ws/sudo/stable.html - http://secunia.com/advisories/38659 - http://secunia.com/advisories/38795 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=570737 - http://www.linuxquestions.org/questions/linux-security-4/the-use-of-sudoedit-command-question-785442/ - http://secunia.com/advisories/38915 - http://sudo.ws/repos/sudo/rev/f86e1b56d074 - http://securitytracker.com/id?1023658 - http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.577019
CVE ID: CVE-2010-0427 State: PUBLISHED Published: 2010-02-25T19:00:00 Last Updated: 2024-08-07T00:45:12.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: sudo 1.6.x before 1.6.9p21, when the runas_default option is used, does not properly set group memberships, which allows local users to gain privileges via a sudo command. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38803 - ftp://ftp.sudo.ws/pub/sudo/sudo-1.6.9p21.patch.gz - http://www.gentoo.org/security/en/glsa/glsa-201003-01.xml - http://sudo.ws/repos/sudo/rev/aa0b6c01c462 - http://secunia.com/advisories/38762 - http://www.debian.org/security/2010/dsa-2006 - https://oval.ci
/rev/aa0b6c01c462 - http://secunia.com/advisories/38762 - http://www.debian.org/security/2010/dsa-2006 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10946 - https://bugzilla.redhat.com/show_bug.cgi?id=567622 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7216 - http://www.securityfocus.com/archive/1/514489/100/0/threaded - http://www.ubuntu.com/usn/USN-905-1 - http://www.gratisoft.us/bugzilla/attachment.cgi?id=255 - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html - http://wiki.rpath.com/Advisories:rPSA-2010-0075 - http://www.openwall.com/lists/oss-security/2010/02/23/4 - http://www
- http://wiki.rpath.com/Advisories:rPSA-2010-0075 - http://www.openwall.com/lists/oss-security/2010/02/23/4 - http://www.openwall.com/lists/oss-security/2010/02/24/5 - http://secunia.com/advisories/38795 - http://www.sudo.ws/cgi-bin/cvsweb/sudo/set_perms.c.diff?r1=1.30.2.7&r2=1.30.2.8 - http://secunia.com/advisories/38915 - http://www.gratisoft.us/bugzilla/show_bug.cgi?id=349 - http://securitytracker.com/id?1023658
CVE ID: CVE-2010-0428 State: PUBLISHED Published: 2010-08-24T17:00:00Z Last Updated: 2024-08-07T00:45:12.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and qspice 0.3.0, does not properly validate guest QXL driver pointers, which allows guest OS users to cause a denial of service (invalid pointer dereference and guest OS crash) or possibly gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://rhn.redhat.com/errata/RHSA-2010-0622.html - https://bugzilla.redhat.com/show_bug.cgi?id=568699 - https://rhn.