Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-0870 State: PUBLISHED Published: 2012-02-23T11:00:00 Last Updated: 2024-08-06T18:38:14.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in the file-sharing service on the BlackBerry PlayBook tablet before 2.0.0.7971 and other products, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a Batched (aka AndX) request that triggers infinite recursion. Additional Analyst Notes: - CVE Program Container: References: - http://btsc.webapps.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB29565 - http://lists.opensuse.org/opens
btsc.webapps.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB29565 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00008.html - http://www.ubuntu.com/usn/USN-1374-1 - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00008.html - http://secunia.com/advisories/48844 - http://secunia.com/advisories/48116 - https://bugzilla.redhat.com/show_bug.cgi?id=795509 - http://secunia.com/advisories/48879 - http://secunia.com/advisories/48186 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00009.html - http://support.apple.com/kb/HT5281 - http://lists.apple.com
nsuse.org/opensuse-security-announce/2012-03/msg00009.html - http://support.apple.com/kb/HT5281 - http://lists.apple.com/archives/security-announce/2012/May/msg00001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/73361
CVE ID: CVE-2012-0871 State: PUBLISHED Published: 2014-04-18T14:00:00 Last Updated: 2024-08-06T18:38:14.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: The session_link_x11_socket function in login/logind-session.c in systemd-logind in systemd, possibly 37 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on the X11 user directory in /run/user/. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00030.html - http://cgit.freedesktop.org/systemd/systemd/commit/?id=fc3c1c6e091ea16ad5600b145201ec535bbb5d7c - https://bugzilla.redhat.com/show_bug.cgi?id=795853 - h
emd/systemd/commit/?id=fc3c1c6e091ea16ad5600b145201ec535bbb5d7c - https://bugzilla.redhat.com/show_bug.cgi?id=795853 - https://bugzilla.novell.com/show_bug.cgi?id=747154 - http://www.osvdb.org/79768
CVE ID: CVE-2012-0872 State: PUBLISHED Published: 2012-03-19T19:00:00 Last Updated: 2024-08-06T18:38:14.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in OxWall 1.1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) captchaField, (2) email, (3) form_name, (4) password, (5) realname, (6) repeatPassword, or (7) username parameters to Oxwall/join; (8) captcha, (9) email, (10) form_name, (11) from, or (12) subject parameters to Oxwall/contact; (13) tag parameter to Oxwall/blogs/browse-by-tag; or (14) PATH_INFO to Oxwall/photo/viewlist/tagged, (15) Oxwall/photo/viewlist, or (16) Oxwall/video/
logs/browse-by-tag; or (14) PATH_INFO to Oxwall/photo/viewlist/tagged, (15) Oxwall/photo/viewlist, or (16) Oxwall/video/viewlist. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/73466 - http://yehg.net/lab/pr0js/advisories/%5BOxWall_1.1.1%5D_xss - http://www.openwall.com/lists/oss-security/2012/02/20/5 - http://www.openwall.com/lists/oss-security/2012/02/20/10 - http://archives.neohapsis.com/archives/bugtraq/2012-02/0113.html - http://archives.neohapsis.com/archives/bugtraq/2012-02/0106.html - http://www.securityfocus.com/bid/52090
CVE ID: CVE-2012-0873 State: PUBLISHED Published: 2012-02-23T19:00:00Z Last Updated: 2024-09-16T16:54:09.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Boonex Dolphin before 7.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) explain parameter to explanation.php or the (2) photos_only, (3) online_only, or (4) mode parameters to viewFriends.php. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-02/0107.html - http://www.boonex.com/n/dolphin-7-0-8-released - http://www.boonex.com/trac/dolphin/changeset/15282 - http://www.boonex.c
ttp://www.boonex.com/n/dolphin-7-0-8-released - http://www.boonex.com/trac/dolphin/changeset/15282 - http://www.boonex.com/trac/dolphin/changeset/15283 - http://www.openwall.com/lists/oss-security/2012/02/20/11 - http://yehg.net/lab/pr0js/advisories/%5BDolphin_7.0.7%5D_xss - http://www.boonex.com/trac/dolphin/ticket/2530 - http://www.securityfocus.com/bid/52088 - http://www.openwall.com/lists/oss-security/2012/02/20/6
CVE ID: CVE-2012-0874 State: PUBLISHED Published: 2013-02-05T23:11:00 Last Updated: 2024-08-06T18:38:14.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) JMXInvokerHAServlet and (2) EJBInvokerHAServlet invoker servlets in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 do not require authentication by default in certain profiles, which might allow remote attackers to invoke MBean methods and execute arbitrary code via unspecified vectors. NOTE: this issue can only be exploited when the interceptor is not properly configured with a "second layer of authentication," or whe
ue can only be exploited when the interceptor is not properly configured with a "second layer of authentication," or when used in conjunction with other vulnerabilities that bypass this second layer. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-0192.html - http://rhn.redhat.com/errata/RHSA-2013-0198.html - http://rhn.redhat.com/errata/RHSA-2013-0195.html - http://rhn.redhat.com/errata/RHSA-2013-0221.html - http://rhn.redhat.com/errata/RHSA-2013-0196.html - http://www.securityfocus.com/bid/57552 - http://rhn.redhat.com/errata/RHSA-2013-0193.html - http://secunia.com/advisories/51984 - http://securitytracker.com/id?1028042 - http://sec
om/errata/RHSA-2013-0193.html - http://secunia.com/advisories/51984 - http://securitytracker.com/id?1028042 - http://secunia.com/advisories/52054 - http://archives.neohapsis.com/archives/bugtraq/2013-12/0134.html - http://rhn.redhat.com/errata/RHSA-2013-0191.html - https://bugzilla.redhat.com/show_bug.cgi?id=795645 - http://rhn.redhat.com/errata/RHSA-2013-0533.html - http://rhn.redhat.com/errata/RHSA-2013-0197.html - http://www.exploit-db.com/exploits/30211 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81511 - http://rhn.redhat.com/errata/RHSA-2013-0194.html
CVE ID: CVE-2012-0875 State: PUBLISHED Published: 2014-02-04T19:00:00 Last Updated: 2024-08-06T18:38:14.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: SystemTap 1.7, 1.6.7, and probably other versions, when unprivileged mode is enabled, allows local users to obtain sensitive information from kernel memory or cause a denial of service (kernel panic and crash) via vectors related to crafted DWARF data, which triggers a read of an invalid pointer. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-0376.html - http://sourceware.org/bugzilla/show_bug.cgi?id=13714 - http://securitytracker.com/id?1026777 - http://permalink.gmane.
- http://sourceware.org/bugzilla/show_bug.cgi?id=13714 - http://securitytracker.com/id?1026777 - http://permalink.gmane.org/gmane.comp.security.oss.general/6987 - http://sourceware.org/git/?p=systemtap.git%3Ba=commit%3Bh=64b0cff3b - http://lists.opensuse.org/opensuse-updates/2013-03/msg00057.html
CVE ID: CVE-2012-0876 State: PUBLISHED Published: 2012-07-03T19:00:00 Last Updated: 2024-08-06T18:38:15.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49504 - http://sourceforge.net/tracker/?func=detail&atid=110127&aid=3496608&group_id=10127 - https://www.tenable.com/security/tns-2016-20 - http://
net/tracker/?func=detail&atid=110127&aid=3496608&group_id=10127 - https://www.tenable.com/security/tns-2016-20 - http://www.ubuntu.com/usn/USN-1527-1 - http://bugs.python.org/issue13703#msg151870 - https://support.apple.com/HT205637 - http://secunia.com/advisories/51040 - http://rhn.redhat.com/errata/RHSA-2012-0731.html - http://www.securityfocus.com/bid/52379 - http://sourceforge.net/projects/expat/files/expat/2.1.0/ - http://rhn.redhat.com/errata/RHSA-2016-0062.html - http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html - http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html - http://www.debian.org/security/2012/dsa-2525 - http://www.oracle.com/techne
s/security-announce/2015/Dec/msg00005.html - http://www.debian.org/security/2012/dsa-2525 - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:041 - http://rhn.redhat.com/errata/RHSA-2016-2957.html - http://www.ubuntu.com/usn/USN-1613-2 - http://mail.libexpat.org/pipermail/expat-discuss/2012-March/002768.html - http://secunia.com/advisories/51024 - http://www.ubuntu.com/usn/USN-1613-1 - https://kc.mcafee.com/corporate/index?page=content&id=SB10365
CVE ID: CVE-2012-0877 State: PUBLISHED Published: 2019-11-22T16:15:26 Last Updated: 2024-08-06T18:38:14.994Z Vendors: PyXML Products: PyXML Problem Types: table collisions CPU usage DoS Description: PyXML: Hash table collisions CPU usage Denial of Service Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-0877 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-0877 - https://access.redhat.com/security/cve/cve-2012-0877 - http://seclists.org/oss-sec/2014/q3/96 - http://www.openwall.com/lists/oss-security/2014/07/08/11
CVE ID: CVE-2012-0878 State: PUBLISHED Published: 2012-05-01T19:00:00 Last Updated: 2024-08-06T18:38:15.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: Paste Script 1.7.5 and earlier does not properly set group memberships during execution with root privileges, which might allow remote attackers to bypass intended file-access restrictions by leveraging a web application that uses the local filesystem. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=796790 - http://www.openwall.com/lists/oss-security/2012/02/23/1 - https://bitbucket.org/ianb/pastescript/pull-request/3/fix-group-permissions-for-pastescriptserve - http
y/2012/02/23/1 - https://bitbucket.org/ianb/pastescript/pull-request/3/fix-group-permissions-for-pastescriptserve - http://secunia.com/advisories/48812 - http://www.openwall.com/lists/oss-security/2012/02/23/4 - http://rhn.redhat.com/errata/RHSA-2012-1206.html - http://secunia.com/advisories/50410 - http://groups.google.com/group/paste-users/browse_thread/thread/2aa651ba331c2471 - https://bitbucket.org/ianb/pastescript/changeset/a19e462769b4
CVE ID: CVE-2012-0879 State: PUBLISHED Published: 2012-05-17T10:00:00 Last Updated: 2024-08-06T18:38:14.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: The I/O implementation for block devices in the Linux kernel before 2.6.33 does not properly handle the CLONE_IO feature, which allows local users to cause a denial of service (I/O instability) by starting multiple processes that share an I/O context. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-0531.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=61cc74fbb87af6aa551a06a370590c9bc07e29d9 - http://www.ubuntu.com/usn/USN-1408-1 - ht
rvalds/linux-2.6.git%3Ba=commit%3Bh=61cc74fbb87af6aa551a06a370590c9bc07e29d9 - http://www.ubuntu.com/usn/USN-1408-1 - http://www.openwall.com/lists/oss-security/2012/02/23/5 - http://www.securitytracker.com/id?1027086 - http://www.debian.org/security/2012/dsa-2469 - http://rhn.redhat.com/errata/RHSA-2012-0481.html - https://bugzilla.redhat.com/show_bug.cgi?id=796829 - http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html - http://secunia.com/advisories/48545 - http://www.ubuntu.com/usn/USN-1411-1 - https://github.com/torvalds/linux/commit/b69f2292063d2caf37ca9aec7d63ded203701bf3 - http://secunia.com/advisories/48842 - https://github.com/torvalds/linux/commit/61cc74fbb87a
af37ca9aec7d63ded203701bf3 - http://secunia.com/advisories/48842 - https://github.com/torvalds/linux/commit/61cc74fbb87af6aa551a06a370590c9bc07e29d9 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.33 - http://www.ubuntu.com/usn/USN-1410-1 - http://marc.info/?l=bugtraq&m=139447903326211&w=2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b69f2292063d2caf37ca9aec7d63ded203701bf3
CVE ID: CVE-2012-0880 State: PUBLISHED Published: 2017-08-08T21:00:00 Last Updated: 2024-08-06T18:38:15.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Xerces-C++ allows remote attackers to cause a denial of service (CPU consumption) via a crafted message sent to an XML service that causes hash table collisions. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=787103 - http://seclists.org/oss-sec/2014/q3/96
CVE ID: CVE-2012-0881 State: PUBLISHED Published: 2017-10-30T16:00:00 Last Updated: 2024-08-06T18:38:15.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of service (CPU consumption) via a crafted message to an XML service, which triggers hash table collisions. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/49dc6702104a86ecbb40292dcd329ce9ae4c32b74733199ecab14a73%40%3Cj-users.xerces.apache.org%3E - http://www.openwall.com/lists/oss-security/2014/07/08/11 - https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535
sts/oss-security/2014/07/08/11 - https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E - https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E - https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5%40%3Csolr-user.lucene.apache.org%3E - https://issues.apache.or
r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5%40%3Csolr-user.lucene.apache.org%3E - https://issues.apache.org/jira/browse/XERCESJ-1685 - https://bugzilla.redhat.com/show_bug.cgi?id=787104 - https://www.oracle.com//security-alerts/cpujul2021.html - https://lists.apache.org/thread.html/rea7b831dceeb2a2fa817be6f63b08722042e3647fb2d47c144370a56%40%3Ccommon-issues.hadoop.apache.org%3E
CVE ID: CVE-2012-0882 State: PUBLISHED Published: 2012-12-21T02:00:00Z Last Updated: 2024-08-06T18:38:14.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possibly other versions including 5.5.x before 5.5.22 and 5.1.x before 5.1.62, allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by VulnDisco Pack Professional 9.17. NOTE: as of 20120224, this disclosure has no actionable information. However, because the module author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. NOTE: due to lack of details, it is not clear whether this issue is a du
ssigned a CVE identifier for tracking purposes. NOTE: due to lack of details, it is not clear whether this issue is a duplicate of CVE-2012-0492 or another CVE. Additional Analyst Notes: - CVE Program Container: References: - https://lists.immunityinc.com/pipermail/canvas/2012-February/000014.html - https://lists.immunityinc.com/pipermail/canvas/2012-February/000011.html - https://bugzilla.redhat.com/show_bug.cgi?id=789141 - http://www.openwall.com/lists/oss-security/2012/02/24/2 - https://blogs.oracle.com/sunsecurity/entry/cve_2012_0882buffer_overflow_vulnerability
CVE ID: CVE-2012-0883 State: PUBLISHED Published: 2012-04-18T10:00:00 Last Updated: 2024-08-06T18:38:14.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: envvars (aka envvars-std) in the Apache HTTP Server before 2.4.2 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse DSO in the current working directory during execution of apachectl. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=134012830914727&w=2 - http://www.securityfocus.com/bid/53046 - http://secunia.com/advisories/48849 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c0
- http://secunia.com/advisories/48849 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html - http://www.apache.org/dist/httpd/Announcement2.4.html - http://www.apachelounge.com/Changelog-2.4.html - http://www.securitytracker.com/id?1026932 - https://httpd.apache.org/security/vulnerabilities_24.html - http://article.gmane.org/gmane.comp.apache.devel/48158 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00012.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/74901 - http://marc.info/?l=bugtraq&m=134012830914727&w=2 - http://lists.opensuse.org/opensuse-updates/2013-0
rabilities/74901 - http://marc.info/?l=bugtraq&m=134012830914727&w=2 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00009.html - http://support.apple.com/kb/HT5880 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862 - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf - http://svn.apache.org/viewvc?view=revision&revision=1296428 - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://lists.apache
thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%
httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9b4b963760a3cb5a4a70c902f325c6c0337fe51d5b8570416f8f8729%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r05b5357d1f6bd106f41541ee7d87aafe3f5ea4dc3e9bde5ce09baff8%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r1d201e3da3
f41541ee7d87aafe3f5ea4dc3e9bde5ce09baff8%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r1d201e3da31a2c8aa870c8314623caef7debd74a13d0f25205e26f15%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2012-0884 State: PUBLISHED Published: 2012-03-13T01:00:00 Last Updated: 2024-08-06T18:38:14.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: The implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL before 0.9.8u and 1.x before 1.0.0h does not properly restrict certain oracle behavior, which makes it easier for context-dependent attackers to decrypt data via a Million Message Attack (MMA) adaptive chosen ciphertext attack. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077666.html - http://rhn.redhat.com/errata/RHSA-2012-0531.html - http://www-01.ibm.com/sup
l/package-announce/2012-April/077666.html - http://rhn.redhat.com/errata/RHSA-2012-0531.html - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html - https://downloads.avaya.com/css/P8/documents/100162507 - http://rhn.redhat.com/errata/RHSA-2012-1308.html - https://hermes.opensuse.org/messages/14330767 - http://rhn.redhat.com/errata/RHSA-2012-1307.html - http://www.openssl.org/news/secadv_20120312.txt - http://secunia.com/advisories/48916 - http://rhn.redhat.com/errata/RHSA-2012-0488.html - http://www.debian.org/security/2012/dsa-2454 - http://secunia.com/advisories/48895 - http://secunia.com/advisori
.html - http://www.debian.org/security/2012/dsa-2454 - http://secunia.com/advisories/48895 - http://secunia.com/advisories/48580 - http://www.kb.cert.org/vuls/id/737740 - http://rhn.redhat.com/errata/RHSA-2012-1306.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077086.html - http://marc.info/?l=bugtraq&m=134039053214295&w=2 - http://secunia.com/advisories/57353 - http://rhn.redhat.com/errata/RHSA-2012-0426.html - http://marc.info/?l=bugtraq&m=133728068926468&w=2 - http://marc.info/?l=bugtraq&m=134039053214295&w=2 - http://marc.info/?l=bugtraq&m=133951357207000&w=2 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077221.html - http://marc.inf
133951357207000&w=2 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077221.html - http://marc.info/?l=bugtraq&m=133951357207000&w=2 - http://marc.info/?l=bugtraq&m=133728068926468&w=2
CVE ID: CVE-2012-0885 State: PUBLISHED Published: 2012-01-25T15:00:00Z Last Updated: 2024-09-16T23:41:35.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: chan_sip.c in Asterisk Open Source 1.8.x before 1.8.8.2 and 10.x before 10.0.1, when the res_srtp module is used and media support is improperly configured, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted SDP message with a crypto attribute and a (1) video or (2) text media type, as demonstrated by CSipSimple. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.asterisk.org/pub/security/AST-2012-001-10.diff - https://issues.asterisk.o