Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-1047 State: PUBLISHED Published: 2011-02-21T18:00:00 Last Updated: 2024-08-06T22:14:27.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in VastHTML Forum Server (aka ForumPress) plugin 1.6.1 and 1.6.5 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) search_max parameter in a search action to index.php, which is not properly handled by wpf.class.php, (2) id parameter in an editpost action to index.php, which is not properly handled by wpf-post.php, or (3) topic parameter to feed.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/80
to feed.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8099 - http://www.securityfocus.com/bid/46362 - http://www.htbridge.ch/advisory/sql_injection_in_wp_forum_server_wordpress_plugin_1.html - http://www.securityfocus.com/archive/1/516400/100/0/threaded - http://osvdb.org/70994 - http://secunia.com/advisories/43306 - http://www.securityfocus.com/archive/1/516402/100/0/threaded - http://osvdb.org/70993 - http://www.htbridge.ch/advisory/sql_injection_in_wp_forum_server_wordpress_plugin_2.html - http://www.htbridge.ch/advisory/sql_injection_in_wp_forum_server_wordpress_plugin.html
CVE ID: CVE-2011-1048 State: PUBLISHED Published: 2011-02-21T18:00:00Z Last Updated: 2024-09-17T03:08:00.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in product.php in MihanTools 1.33 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/16143 - http://secunia.com/advisories/43195 - http://osvdb.org/70858 - http://www.securityfocus.com/bid/46287
CVE ID: CVE-2011-1049 State: PUBLISHED Published: 2011-02-21T18:00:00Z Last Updated: 2024-09-16T18:45:16.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Mach-O input file loader in Hex-Rays IDA Pro 5.7 and 6.0 allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted Macho-O file. Additional Analyst Notes: - CVE Program Container: References: - https://www.hex-rays.com/vulnfix.shtml - http://osvdb.org/70846 - http://secunia.com/advisories/43190 - http://www.vupen.com/english/advisories/2011/0357
CVE ID: CVE-2011-1050 State: PUBLISHED Published: 2011-02-21T18:00:00 Last Updated: 2024-08-06T22:14:27.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors related to "converson of string encodings" and "inconsistencies in the handling of UTF8 sequences by the user interface." Additional Analyst Notes: - CVE Program Container: References: - https://www.hex-rays.com/vulnfix.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/65562 - http://www.securityfocus.com/bid/46525 - http://www.vupen.com/english/advisories/2011/0357
CVE ID: CVE-2011-1051 State: PUBLISHED Published: 2011-02-21T18:00:00 Last Updated: 2024-08-06T22:14:27.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the COFF/EPOC/EXPLOAD input file loaders in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors related to memory allocation. Additional Analyst Notes: - CVE Program Container: References: - https://www.hex-rays.com/vulnfix.shtml - http://www.securityfocus.com/bid/46525 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65561
CVE ID: CVE-2011-1052 State: PUBLISHED Published: 2011-02-21T18:00:00 Last Updated: 2024-08-06T22:14:27.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the PSX/GEOS input file loaders in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors related to memory allocation. Additional Analyst Notes: - CVE Program Container: References: - https://www.hex-rays.com/vulnfix.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/65560 - http://www.securityfocus.com/bid/46525
CVE ID: CVE-2011-1053 State: PUBLISHED Published: 2011-02-21T18:00:00 Last Updated: 2024-08-06T22:14:27.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Mach-O input file loader in Hex-Rays IDA Pro 5.7 and 6.0 allows user-assisted remote attackers to cause a denial of service (out-of-memory exception and inability to analyze code) via a crafted Mach-O file. Additional Analyst Notes: - CVE Program Container: References: - https://www.hex-rays.com/vulnfix.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/65559 - http://www.securityfocus.com/bid/46525
CVE ID: CVE-2011-1054 State: PUBLISHED Published: 2011-02-21T18:00:00 Last Updated: 2024-08-06T22:14:27.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the PEF input file loader in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.hex-rays.com/vulnfix.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/65558 - http://www.securityfocus.com/bid/46525
CVE ID: CVE-2011-1055 State: PUBLISHED Published: 2011-02-21T18:00:00 Last Updated: 2024-08-06T22:14:27.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in api/ice_media.cfc in Lingxia I.C.E CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the session.user_id parameter to media.cfm. Additional Analyst Notes: - CVE Program Container: References: - http://www.stratsec.net/Research/Advisories/Lingxia-273-I-C-E-CMS-Blind-SQL-Injection-%28SS-2011 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65462 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65477 - http://www.exploit-db.com/exploits/16171 - http://secunia.com/advi
/exchange.xforce.ibmcloud.com/vulnerabilities/65477 - http://www.exploit-db.com/exploits/16171 - http://secunia.com/advisories/43327 - http://www.securityfocus.com/bid/46373
CVE ID: CVE-2011-1056 State: PUBLISHED Published: 2011-02-21T20:00:00 Last Updated: 2024-08-06T22:14:27.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installer for Metasploit Framework 3.5.1, when running on Windows, uses weak inherited permissions for the Metasploit installation directory, which allows local users to gain privileges by replacing critical files with a Trojan horse. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/70857 - http://www.vupen.com/english/advisories/2011/0371 - http://blog.metasploit.com/2011/02/metasploit-framework-352-released.html - http://secunia.com/advisories/43166
CVE ID: CVE-2011-1057 State: REJECTED Published: 2011-02-21T20:00:00 Last Updated: 2011-03-11T10:00:00 Description: No description available.
CVE ID: CVE-2011-1058 State: PUBLISHED Published: 2011-02-22T17:00:00 Last Updated: 2024-08-06T22:14:27.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the reStructuredText (rst) parser in parser/text_rst.py in MoinMoin before 1.9.3, when docutils is installed or when "format rst" is set, allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in the refuri attribute. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46476 - http://www.ubuntu.com/usn/USN-1604-1 - http://lists.fedoraproje
: References: - http://www.securityfocus.com/bid/46476 - http://www.ubuntu.com/usn/USN-1604-1 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055116.html - http://moinmo.in/SecurityFixes - http://www.debian.org/security/2011/dsa-2321 - http://www.vupen.com/english/advisories/2011/0588 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055124.html - http://secunia.com/advisories/43665 - http://secunia.com/advisories/50885 - http://www.vupen.com/english/advisories/2011/0455 - http://secunia.com/advisories/43413 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054544.html - http://www.vupen.com/english/advisories/2011/0571 - https
roject.org/pipermail/package-announce/2011-March/054544.html - http://www.vupen.com/english/advisories/2011/0571 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65545
CVE ID: CVE-2011-1059 State: PUBLISHED Published: 2011-02-22T18:00:00 Last Updated: 2024-08-06T22:14:27.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in WebCore in WebKit before r77705, as used in Google Chrome before 11.0.672.2 and other products, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors that entice a user to resubmit a form, related to improper handling of provisional items by the HistoryController component, aka rdar problem 8938557. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/chromium/issues/detail
938557. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/chromium/issues/detail?id=70315 - http://trac.webkit.org/changeset/77705 - http://www.securityfocus.com/bid/46577 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13943 - https://bugs.webkit.org/show_bug.cgi?id=52819 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65714 - http://googlechromereleases.blogspot.com/2011/02/dev-channel-update_17.html
CVE ID: CVE-2011-1060 State: PUBLISHED Published: 2011-02-22T23:00:00 Last Updated: 2024-08-06T22:14:27.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the member function in classes/member.php in WSN Guest 1.24 allows remote attackers to execute arbitrary SQL commands via the wsnuser cookie to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46444 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65527 - http://www.securityfocus.com/archive/1/516519/100/0/threaded - http://evuln.com/vulns/174/summary.html - http://securityreason.com/securityalert/8101 - http://secunia.com/advisori
d - http://evuln.com/vulns/174/summary.html - http://securityreason.com/securityalert/8101 - http://secunia.com/advisories/43374
CVE ID: CVE-2011-1061 State: PUBLISHED Published: 2011-02-22T23:00:00 Last Updated: 2024-08-06T22:14:27.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in memberlist.php in WSN Guest 1.24 allows remote attackers to execute arbitrary SQL commands via the time parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8102 - http://packetstormsecurity.org/files/view/98573/wsnguest124-sql.txt - http://evuln.com/vulns/175/summary.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/65550 - http://www.securityfocus.com/bid/46465 - http://www.securityfocus.com/archive/1/516562/100/0/threaded
CVE ID: CVE-2011-1062 State: PUBLISHED Published: 2011-02-22T23:00:00 Last Updated: 2024-08-06T22:14:27.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in include/html/header.php in TaskFreak! 0.6.4 allow remote attackers to inject arbitrary web script or HTML via the (1) sContext, (2) sort, (3) dir, and (4) show parameters in a save action to index.php; the (5) dir and (6) show parameters to print_list.php; and the (7) HTTP referer header to rss.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/16158
y information. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/16158 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2011-4990.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/65359 - http://osvdb.org/70877 - http://osvdb.org/70878 - http://secunia.com/advisories/43318
CVE ID: CVE-2011-1063 State: PUBLISHED Published: 2011-02-22T23:00:00 Last Updated: 2024-08-06T22:14:27.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Cherry-Design Photopad 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id or (2) data[title] parameters in an edit action to files.php, or (3) id parameter in a view action to gallery.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/65519 - http://www.htbridge.ch/advisory/multiple_xss_vulnerabilities_in_photopad.html - http://www.securityfocus.com/archive/1/516448/100/
.htbridge.ch/advisory/multiple_xss_vulnerabilities_in_photopad.html - http://www.securityfocus.com/archive/1/516448/100/0/threaded - http://securityreason.com/securityalert/8103 - http://secunia.com/advisories/43348
CVE ID: CVE-2011-1064 State: PUBLISHED Published: 2011-02-22T23:00:00 Last Updated: 2024-08-06T22:14:27.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in member/list.php in qibosoft Qi Bo CMS 7 allows remote attackers to execute arbitrary SQL commands via the aidDB[] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/65485 - http://www.securityfocus.com/bid/46445 - http://secunia.com/advisories/43396 - http://bbs.wolvez.org/viewtopic.php?id=211
CVE ID: CVE-2011-1065 State: PUBLISHED Published: 2011-02-22T23:00:00 Last Updated: 2024-08-06T22:14:27.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the PIPIWebPlayer ActiveX control (PIWebPlayer.ocx) in PIPI Player 2.8.0.0 allow remote attackers to execute arbitrary code via long arguments to the (1) PlayURL or (2) PlayURLWithLocalPlayer methods. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43394 - http://www.wooyun.org/bugs/wooyun-2010-01383 - http://www.wooyun.org/bugs/wooyun-2010-01382 - http://www.securityfocus.com/bid/46468 - https://exchange.xforce.ibmcloud.com/vulnerabilities
g/bugs/wooyun-2010-01382 - http://www.securityfocus.com/bid/46468 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65537
CVE ID: CVE-2011-1066 State: PUBLISHED Published: 2011-02-22T23:00:00 Last Updated: 2024-08-06T22:14:27.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Messaging module 6.x-2.x before 6.x-2.4 and 6.x-4.x before 6.x-4.0-beta8 for Drupal allows remote attackers with administer messaging permissions to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46438 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65449 - http://drupal.org/node/1064024 - http://osvdb.org/70933 - http://secunia.com/advisories/43385
CVE ID: CVE-2011-1067 State: PUBLISHED Published: 2011-02-23T18:00:00 Last Updated: 2024-08-06T22:14:27.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: slapd (aka ns-slapd) in 389 Directory Server before 1.2.8.a2 does not properly manage the c_timelimit field of the connection table element, which allows remote attackers to cause a denial of service (daemon outage) via Simple Paged Results connections, as demonstrated by using multiple processes to replay TCP sessions, a different vulnerability than CVE-2011-0019. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43566 - https://bugzilla.redhat.com/show_bug.cgi?id=668619 - https://
ainer: References: - http://secunia.com/advisories/43566 - https://bugzilla.redhat.com/show_bug.cgi?id=668619 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65769 - http://directory.fedoraproject.org/wiki/Release_Notes
CVE ID: CVE-2011-1068 State: PUBLISHED Published: 2011-02-23T18:00:00Z Last Updated: 2024-09-16T23:22:16.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Azure Software Development Kit (SDK) 1.3.x before 1.3.20121.1237, when Full IIS and a Web Role are used with an ASP.NET application, does not properly support the use of cookies for maintaining state, which allows remote attackers to obtain potentially sensitive information by reading an encrypted cookie and performing unspecified other steps. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43237 - http://blogs.msdn.com/b/windowsazure/archive/2011/02/03/windows-
er: References: - http://secunia.com/advisories/43237 - http://blogs.msdn.com/b/windowsazure/archive/2011/02/03/windows-azure-software-development-kit-sdk-refresh-released.aspx
CVE ID: CVE-2011-1069 State: PUBLISHED Published: 2020-02-05T20:45:17 Last Updated: 2024-08-06T22:14:27.609Z Vendors: PHPShop Products: PHPShop Problem Types: Cross-Site Scripting Description: PHPShop through 0.8.1 has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2011/02/28/9
CVE ID: CVE-2011-1070 State: PUBLISHED Published: 2019-11-14T00:37:09 Last Updated: 2024-08-06T22:14:27.794Z Vendors: v86d Products: v86d Problem Types: Other Description: v86d before 0.1.10 do not verify if received netlink messages are sent by the kernel. This could allow unprivileged users to manipulate the video mode and potentially other consequences. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-1070 - https://access.redhat.com/security/cve/cve-2011-1070 - https://seclists.org/oss-sec/2011/q1/315
CVE ID: CVE-2011-1071 State: PUBLISHED Published: 2011-04-08T15:00:00 Last Updated: 2024-08-06T22:14:27.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GNU C Library (aka glibc or libc6) before 2.12.2 and Embedded GLIBC (EGLIBC) allow context-dependent attackers to execute arbitrary code or cause a denial of service (memory consumption) via a long UTF8 string that is used in an fnmatch call, aka a "stack extension attack," a related issue to CVE-2010-2898, CVE-2010-1917, and CVE-2007-4782, as originally reported for use of this library by Google Chrome. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46563 - http://securit
Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46563 - http://securityreason.com/securityalert/8175 - https://bugzilla.redhat.com/show_bug.cgi?id=681054 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - http://www.redhat.com/support/errata/RHSA-2011-0412.html - http://www.vupen.com/english/advisories/2011/0863 - http://bugs.debian.org/615120 - http://secunia.com/advisories/43989 - http://securitytracker.com/id?1025290 - http://sourceware.org/bugzilla/show_bug.cgi?id=11883 - http://secunia.com/advisories/43492 - http://openwall.com/lists/oss-security/2011/02/26/3 - https://oval.cisecurity.o
- http://secunia.com/advisories/43492 - http://openwall.com/lists/oss-security/2011/02/26/3 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12853 - http://openwall.com/lists/oss-security/2011/02/28/11 - http://seclists.org/fulldisclosure/2011/Feb/635 - http://seclists.org/fulldisclosure/2011/Feb/644 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:178 - http://secunia.com/advisories/43830 - http://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=f15ce4d8dc139523fe0c273580b604b2453acba6 - http://www.redhat.com/support/errata/RHSA-2011-0413.html - http://scarybeastsecurity.blogspot.com/2011/02/i-got-accidental-code-execution-via.html - http:
ta/RHSA-2011-0413.html - http://scarybeastsecurity.blogspot.com/2011/02/i-got-accidental-code-execution-via.html - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://openwall.com/lists/oss-security/2011/02/28/15 - http://code.google.com/p/chromium/issues/detail?id=48733
CVE ID: CVE-2011-1072 State: PUBLISHED Published: 2011-03-03T00:00:00 Last Updated: 2024-08-06T22:14:27.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installer in PEAR before 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the package.xml file, related to the (1) download_dir, (2) cache_dir, (3) tmp_dir, and (4) pear-build-download directories, a different vulnerability than CVE-2007-2519. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/02/28/5 - http://openwall.com/lists/oss-security/2011/03/01/7 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546164 - http://secunia.com/advis
com/lists/oss-security/2011/03/01/7 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546164 - http://secunia.com/advisories/43533 - http://openwall.com/lists/oss-security/2011/03/01/8 - http://openwall.com/lists/oss-security/2011/02/28/12 - http://news.php.net/php.pear.cvs/61264 - http://security-tracker.debian.org/tracker/CVE-2011-1072 - http://openwall.com/lists/oss-security/2011/03/01/5 - http://openwall.com/lists/oss-security/2011/03/01/4 - http://www.redhat.com/support/errata/RHSA-2011-1741.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:187 - http://pear.php.net/bugs/bug.php?id=18056 - http://openwall.com/lists/oss-security/2011/02/28/3 - https://exchange.xforce.ib
://pear.php.net/bugs/bug.php?id=18056 - http://openwall.com/lists/oss-security/2011/02/28/3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65721 - http://svn.php.net/viewvc?view=revision&revision=308687 - http://pear.php.net/advisory-20110228.txt - http://www.securityfocus.com/bid/46605 - http://openwall.com/lists/oss-security/2011/03/01/9
CVE ID: CVE-2011-1073 State: PUBLISHED Published: 2011-03-04T22:00:00 Last Updated: 2024-08-06T22:14:27.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: crontab.c in crontab in FreeBSD and Apple Mac OS X allows local users to (1) determine the existence of arbitrary files via a symlink attack on a /tmp/crontab.XXXXXXXXXX temporary file and (2) perform MD5 checksum comparisons on arbitrary pairs of files via two symlink attacks on /tmp/crontab.XXXXXXXXXX temporary files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/65899 - http://openwall.com/lists/oss-security/2011/02/28/14 - http://www.securityfocus.com/
bmcloud.com/vulnerabilities/65899 - http://openwall.com/lists/oss-security/2011/02/28/14 - http://www.securityfocus.com/bid/46604 - http://securityreason.com/securityalert/8117 - http://www.securityfocus.com/archive/1/516716/100/0/threaded - http://openwall.com/lists/oss-security/2011/02/28/6 - http://marc.info/?l=full-disclosure&m=129891323028897&w=2
CVE ID: CVE-2011-1074 State: PUBLISHED Published: 2011-03-04T22:00:00 Last Updated: 2024-08-06T22:14:27.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: crontab.c in crontab in FreeBSD allows local users to determine the existence of arbitrary directories via a command-line argument composed of a directory name concatenated with a directory traversal sequence that leads to the /etc/crontab pathname. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/02/28/14 - http://www.securityfocus.com/bid/46604 - http://securityreason.com/securityalert/8117 - http://www.securityfocus.com/archive/1/516716/100/0/threaded - https://exc
ttp://securityreason.com/securityalert/8117 - http://www.securityfocus.com/archive/1/516716/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/65900 - http://openwall.com/lists/oss-security/2011/02/28/6 - http://marc.info/?l=full-disclosure&m=129891323028897&w=2