Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-0476 State: PUBLISHED Published: 2010-04-14T15:44:00 Last Updated: 2024-08-07T00:52:18.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SMB client in Microsoft Windows Server 2003 SP2, Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2 allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and reboot) via a crafted SMB transaction response that uses (1) SMBv1 or (2) SMBv2, aka "SMB Client Response Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39336 - http://secunia.com/advisories/39372 - https:
E Program Container: References: - http://www.securityfocus.com/bid/39336 - http://secunia.com/advisories/39372 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-020 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6918 - http://www.us-cert.gov/cas/techalerts/TA10-103A.html
CVE ID: CVE-2010-0477 State: PUBLISHED Published: 2010-04-14T15:44:00 Last Updated: 2024-08-07T00:52:18.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly handle (1) SMBv1 and (2) SMBv2 response packets, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted packet that causes the client to read the entirety of the response, and then improperly interact with the Winsock Kernel (WSK), aka "SMB Client Message Size Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39372 - https://docs.microso
itional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39372 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-020 - http://www.us-cert.gov/cas/techalerts/TA10-103A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6859
CVE ID: CVE-2010-0478 State: PUBLISHED Published: 2010-04-14T15:44:00 Last Updated: 2024-08-07T00:52:18.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in nsum.exe in the Windows Media Unicast Service in Media Services for Microsoft Windows 2000 Server SP4 allows remote attackers to execute arbitrary code via crafted packets associated with transport information, aka "Media Services Stack-based Buffer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-025 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova
-updates/securitybulletins/2010/ms10-025 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7001 - http://www.us-cert.gov/cas/techalerts/TA10-103A.html
CVE ID: CVE-2010-0479 State: PUBLISHED Published: 2010-04-14T15:44:00 Last Updated: 2024-08-07T00:52:18.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Microsoft Office Publisher 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Microsoft Office Publisher File Conversion TextBox Processing Buffer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-023 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7141 - http://www.us-cert.gov/
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7141 - http://www.us-cert.gov/cas/techalerts/TA10-103A.html
CVE ID: CVE-2010-0480 State: PUBLISHED Published: 2010-04-14T15:44:00 Last Updated: 2024-08-07T00:52:19.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the MPEG Layer-3 audio codecs in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to execute arbitrary code via a crafted AVI file, aka "MPEG Layer-3 Audio Decoder Stack Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8336 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7441 -
.com/securityalert/8336 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7441 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-026 - http://www.us-cert.gov/cas/techalerts/TA10-103A.html
CVE ID: CVE-2010-0481 State: PUBLISHED Published: 2010-04-14T15:44:00 Last Updated: 2025-01-21T16:57:07.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly translate a registry key's virtual path to its real path, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Virtual Path Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://secunia.com/advisories/39374 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova
s: - http://secunia.com/advisories/39374 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6770 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-021 - http://www.us-cert.gov/cas/techalerts/TA10-103A.html - http://secunia.com/advisories/39373 - http://www.securitytracker.com/id?1023850
CVE ID: CVE-2010-0482 State: PUBLISHED Published: 2010-04-14T15:44:00 Last Updated: 2024-08-07T00:52:18.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate relocation sections of image files, which allows local users to cause a denial of service (reboot) via a crafted file, aka "Windows Kernel Malformed Image Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39374 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-021 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3
securitybulletins/2010/ms10-021 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7176 - http://www.us-cert.gov/cas/techalerts/TA10-103A.html - http://www.securitytracker.com/id?1023850
CVE ID: CVE-2010-0483 State: PUBLISHED Published: 2010-03-03T19:00:00 Last Updated: 2024-08-07T00:52:18.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, allows user-assisted remote attackers to execute arbitrary code by referencing a (1) local pathname, (2) UNC share pathname, or (3) WebDAV server with a crafted .hlp file in the fourth argument (aka helpfile argument) to the MsgBox function, leading to code execution involving winhlp32.exe when the F1 key is pressed, aka "VBScript Help Keypress Vulnerability." Additional Analyst No
ion involving winhlp32.exe when the F1 key is pressed, aka "VBScript Help Keypress Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7170 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56558 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-022 - http://www.kb.cert.org/vuls/id/612021 - http://www.osvdb.org/62632 - http://www.vupen.com/english/advisories/2010/0485 - http://www.computerworld.com/s/article/9163298/New_zero_day_involves_IE_puts_Windows_XP_users_at_risk - http://www.microsoft.com/technet/security/advisory/981169.mspx - http://
day_involves_IE_puts_Windows_XP_users_at_risk - http://www.microsoft.com/technet/security/advisory/981169.mspx - http://www.theregister.co.uk/2010/03/01/ie_code_execution_bug/ - http://isec.pl/vulnerabilities/isec-0027-msgbox-helpfile-ie.txt - http://www.securityfocus.com/bid/38463 - http://isec.pl/vulnerabilities10.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8654 - http://blogs.technet.com/srd/archive/2010/03/01/help-keypress-vulnerability-in-vbscript-enabling-remote-code-execution.aspx - https://www.metasploit.com/svn/framework3/trunk/modules/exploits/windows/browser/ie_winhlp32.rb - http://securitytracker.com/id?1023668 - http://blogs.tech
ework3/trunk/modules/exploits/windows/browser/ie_winhlp32.rb - http://securitytracker.com/id?1023668 - http://blogs.technet.com/msrc/archive/2010/03/01/security-advisory-981169-released.aspx - http://blogs.technet.com/msrc/archive/2010/02/28/investigating-a-new-win32hlp-and-internet-explorer-issue.aspx - http://www.us-cert.gov/cas/techalerts/TA10-103A.html - http://secunia.com/advisories/38727
CVE ID: CVE-2010-0484 State: PUBLISHED Published: 2010-06-08T22:00:00 Last Updated: 2024-08-07T00:52:18.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 "do not properly validate changes in certain kernel objects," which allows local users to execute arbitrary code via vectors related to Device Contexts (DC) and the GetDCEx function, aka "Win32k Improper Data Validation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/511769/100/0/threaded - https://ov
Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/511769/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7609 - http://www.opera.com/support/kb/view/954/ - http://www.us-cert.gov/cas/techalerts/TA10-159B.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-032
CVE ID: CVE-2010-0485 State: PUBLISHED Published: 2010-06-08T22:00:00 Last Updated: 2025-01-21T17:17:00.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 Gold and SP2, Windows 7, and Server 2008 R2 "do not properly validate all callback parameters when creating a new window," which allows local users to execute arbitrary code, aka "Win32k Window Creation Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Ad
CISA ADP Vulnrichment: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6948 - http://www.opera.com/support/kb/view/954/ - http://www.us-cert.gov/cas/techalerts/TA10-159B.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-032
CVE ID: CVE-2010-0486 State: PUBLISHED Published: 2010-04-14T15:44:00 Last Updated: 2024-08-07T00:52:18.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WinVerifyTrust function in Authenticode Signature Verification 5.1, 6.0, and 6.1 in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly use unspecified fields in a file digest, which allows user-assisted remote attackers to execute arbitrary code via a modified (1) Portable Executable (PE) or (2) cabinet (aka .CAB) file that incorrectly appears to have a valid signature, aka "WinVerifyTrust Sign
cutable (PE) or (2) cabinet (aka .CAB) file that incorrectly appears to have a valid signature, aka "WinVerifyTrust Signature Validation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-019 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6787 - http://www.us-cert.gov/cas/techalerts/TA10-103A.html
CVE ID: CVE-2010-0487 State: PUBLISHED Published: 2010-04-14T15:44:00 Last Updated: 2024-08-07T00:52:18.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Authenticode Signature verification functionality in cabview.dll in Cabinet File Viewer Shell Extension 5.1, 6.0, and 6.1 in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly use unspecified fields in a file digest, which allows remote attackers to execute arbitrary code via a modified cabinet (aka .CAB) file that incorrectly appears to have a valid signature, aka "Cabview Corruption Validatio
a modified cabinet (aka .CAB) file that incorrectly appears to have a valid signature, aka "Cabview Corruption Validation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6886 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-019 - http://www.us-cert.gov/cas/techalerts/TA10-103A.html
CVE ID: CVE-2010-0488 State: PUBLISHED Published: 2010-03-31T19:00:00 Last Updated: 2025-01-21T16:55:52.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 does not properly handle unspecified "encoding strings," which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site, aka "Post Encoding Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://jvn.jp/en/jp/JVN49467403/index.html - http://www.us-cert.gov/cas/techalerts/TA10-089A.html - http://www.securityfocus.com/bid/39028 - http://www.u
ndex.html - http://www.us-cert.gov/cas/techalerts/TA10-089A.html - http://www.securityfocus.com/bid/39028 - http://www.us-cert.gov/cas/techalerts/TA10-068A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018 - http://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000011.html - http://www.vupen.com/english/advisories/2010/0744 - http://securitytracker.com/id?1023773 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7840
CVE ID: CVE-2010-0489 State: PUBLISHED Published: 2010-03-31T19:00:00 Last Updated: 2024-08-07T00:52:19.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via a crafted HTML document that triggers memory corruption, aka "Race Condition Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7774 - http://www.us-cert.gov/cas/techalerts/TA10-089A.html - http://www.securityfocus.com/bid/39026 - http://www.us-cert.gov/cas/techalerts/TA
rt.gov/cas/techalerts/TA10-089A.html - http://www.securityfocus.com/bid/39026 - http://www.us-cert.gov/cas/techalerts/TA10-068A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018 - http://www.vupen.com/english/advisories/2010/0744 - http://securitytracker.com/id?1023773
CVE ID: CVE-2010-0490 State: PUBLISHED Published: 2010-03-31T19:00:00 Last Updated: 2024-08-07T00:52:18.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8302 - http://www.us-cert.gov/cas/techalerts/TA10-089A.html - http://w
y/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8302 - http://www.us-cert.gov/cas/techalerts/TA10-089A.html - http://www.us-cert.gov/cas/techalerts/TA10-068A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018 - http://www.securityfocus.com/bid/39031 - http://www.vupen.com/english/advisories/2010/0744 - http://securitytracker.com/id?1023773
CVE ID: CVE-2010-0491 State: PUBLISHED Published: 2010-03-31T19:00:00 Last Updated: 2024-08-07T00:52:18.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, and 6 SP1 allows remote attackers to execute arbitrary code by changing unspecified properties of an HTML object that has an onreadystatechange event handler, aka "HTML Object Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8421 - http://www.securityfocus.com/bid/39027 - http://www.us-cert.gov/cas/techalerts/TA10-089A.h
org.mitre.oval%3Adef%3A8421 - http://www.securityfocus.com/bid/39027 - http://www.us-cert.gov/cas/techalerts/TA10-089A.html - http://www.us-cert.gov/cas/techalerts/TA10-068A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=864 - http://www.vupen.com/english/advisories/2010/0744 - http://securitytracker.com/id?1023773
CVE ID: CVE-2010-0492 State: PUBLISHED Published: 2010-03-31T19:00:00 Last Updated: 2024-10-21T16:44:40.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in mstime.dll in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via vectors related to the TIME2 behavior, the CTimeAction object, and destruction of markup, leading to memory corruption, aka "HTML Object Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7722 - http://www.us-cert.gov/cas/techalerts/TA10-089A
ty.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7722 - http://www.us-cert.gov/cas/techalerts/TA10-089A.html - http://www.zerodayinitiative.com/advisories/ZDI-10-033 - http://www.us-cert.gov/cas/techalerts/TA10-068A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018 - http://www.securityfocus.com/archive/1/510506/100/0/threaded - http://www.securityfocus.com/bid/39030 - http://www.vupen.com/english/advisories/2010/0744 - http://securitytracker.com/id?1023773
CVE ID: CVE-2010-0493 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-0494 State: PUBLISHED Published: 2010-03-31T19:00:00 Last Updated: 2024-08-07T00:52:18.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-domain vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 allows user-assisted remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted HTML document in a situation where the client user drags one browser window across another browser window, aka "HTML Element Cross-Domain Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-089A.html - http://www.securityfocus.com/bid/39047 - http://w
: References: - http://www.us-cert.gov/cas/techalerts/TA10-089A.html - http://www.securityfocus.com/bid/39047 - http://www.us-cert.gov/cas/techalerts/TA10-068A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8553 - http://www.vupen.com/english/advisories/2010/0744 - http://securitytracker.com/id?1023773
CVE ID: CVE-2010-0495 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-0496 State: PUBLISHED Published: 2010-02-03T19:00:00 Last Updated: 2024-08-07T00:52:18.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeBit ServersMan 3.1.5 on Apple iPhone OS 3.1.2, and iPhone OS for iPod touch, allows remote attackers to cause a denial of service (daemon crash) via a HEAD request for the / URI. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2010-01/0580.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/55949 - http://secunia.com/advisories/38315
CVE ID: CVE-2010-0497 State: PUBLISHED Published: 2010-03-30T18:00:00Z Last Updated: 2024-09-16T17:19:02.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: Disk Images in Apple Mac OS X before 10.6.3 does not provide the expected warning for an unsafe file type in an internet enabled disk image, which makes it easier for user-assisted remote attackers to execute arbitrary code via a package file type. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://support.apple.com/kb/HT4077
CVE ID: CVE-2010-0498 State: PUBLISHED Published: 2010-03-30T18:00:00Z Last Updated: 2024-09-16T22:40:44.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Services in Apple Mac OS X before 10.6.3 does not properly perform authorization during processing of record names, which allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://support.apple.com/kb/HT4077
CVE ID: CVE-2010-0499 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:01.415Z Description: No description available.
CVE ID: CVE-2010-0500 State: PUBLISHED Published: 2010-03-30T18:00:00Z Last Updated: 2024-09-17T00:01:10.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Event Monitor in Apple Mac OS X before 10.6.3 does not properly validate hostnames of SSH clients, which allows remote attackers to cause a denial of service (arbitrary client blacklisting) via a crafted DNS PTR record, related to a "plist injection issue." Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://support.apple.com/kb/HT4077
CVE ID: CVE-2010-0501 State: PUBLISHED Published: 2010-03-30T18:00:00Z Last Updated: 2024-09-17T01:46:43.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in FTP Server in Apple Mac OS X Server before 10.6.3 allows remote authenticated users to read arbitrary files via crafted filenames. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://support.apple.com/kb/HT4077
CVE ID: CVE-2010-0502 State: PUBLISHED Published: 2010-03-30T18:00:00Z Last Updated: 2024-09-17T00:45:47.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: iChat Server in Apple Mac OS X Server before 10.6.3, when group chat is used, does not perform logging for all types of messages, which might allow remote attackers to avoid message auditing via an unspecified selection of message type. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://support.apple.com/kb/HT4077