Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-0114 State: PUBLISHED Published: 2014-04-30T10:00:00 Last Updated: 2024-08-06T09:05:38.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in other products requiring commons-beanutils through 1.9.2, does not suppress the class property, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via the class parameter, as demonstrated by the passing of this parameter to the getClass method of the ActionForm object in Struts 1. Additional Analyst Notes: - CVE Program Container: References: - http://apache-ignite-develop
onForm object in Struts 1. Additional Analyst Notes: - CVE Program Container: References: - http://apache-ignite-developers.2346864.n4.nabble.com/CVE-2014-0114-Apache-Ignite-is-vulnerable-to-existing-CVE-2014-0114-td31205.html - http://secunia.com/advisories/57477 - http://www.vmware.com/security/advisories/VMSA-2014-0008.html - https://issues.apache.org/jira/browse/BEANUTILS-463 - http://secunia.com/advisories/58710 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:095 - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - https://www.oracle.com/technetwork/security-advisory/cp
acle.com/technetwork/security-advisory/cpujan2018-3236628.html - https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html - http://www.vmware.com/security/advisories/VMSA-2014-0012.html - http://www-01.ibm.com/support/docview.wss?uid=swg21675689 - http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136958.html - http://www-01.ibm.com/support/docview.wss?uid=swg21674812 - https://security.netapp.com/advisory/ntap-20140911-0001/ - http://secunia.com/advisories/59464 - http://secunia.com/advisories/59118 - https://security.netapp.com/advisory/ntap-20180629-0006/ - http://www-01.ibm.com/support/docview.wss?uid=swg21675387 - https://access.redhat.com/solution
ory/ntap-20180629-0006/ - http://www-01.ibm.com/support/docview.wss?uid=swg21675387 - https://access.redhat.com/solutions/869353 - https://bugzilla.redhat.com/show_bug.cgi?id=1091938 - http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.2/RELEASE-NOTES.txt - http://advisories.mageia.org/MGASA-2014-0219.html - http://secunia.com/advisories/60703 - http://www-01.ibm.com/support/docview.wss?uid=swg21675972 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755 - http://www-01.ibm.com/support/docview.wss?uid=swg21676375 - http://openwall.com/lists/oss-security/2014/07/08/1 - https://access.redhat.com/errata/RHSA-2018:2669 - https://security.gentoo
openwall.com/lists/oss-security/2014/07/08/1 - https://access.redhat.com/errata/RHSA-2018:2669 - https://security.gentoo.org/glsa/201607-09 - http://marc.info/?l=bugtraq&m=141451023707502&w=2 - http://www.securityfocus.com/archive/1/534161/100/0/threaded - http://www-01.ibm.com/support/docview.wss?uid=swg21675898 - http://www-01.ibm.com/support/docview.wss?uid=swg21676110 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://www-01.ibm.com/support/docview.wss?uid=swg27042296 - http://www-01.ibm.com/support/docview.wss?uid=swg21676303 - http://secunia.com/advisories/59228 - http://secu
27042296 - http://www-01.ibm.com/support/docview.wss?uid=swg21676303 - http://secunia.com/advisories/59228 - http://secunia.com/advisories/59246 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - https://bugzilla.redhat.com/show_bug.cgi?id=1116665 - http://openwall.com/lists/oss-security/2014/06/15/10 - http://secunia.com/advisories/59245 - http://marc.info/?l=bugtraq&m=140801096002766&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg21674128 - http://www-01.ibm.com/support/docview.wss?uid=swg21676931 - http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html - http://secunia.com/advisories/60177 - http://seclists.org/fulldisclosure/2014/De
pics/security/cpujul2014-1972956.html - http://secunia.com/advisories/60177 - http://seclists.org/fulldisclosure/2014/Dec/23 - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - http://www.ibm.com/support/docview.wss?uid=swg21675496 - http://www.debian.org/security/2014/dsa-2940 - http://www-01.ibm.com/support/docview.wss?uid=swg21675266 - http://secunia.com/advisories/59014 - http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html - http://www-01.ibm.com/support/docview.wss?uid=swg21677110 - http://www-01.ibm.com/support/docview.wss?uid=swg21676091 - http://www.securityfocus.com/bid/67121 - http://secunia.com/advisories/59480 - http://marc.info/?
.wss?uid=swg21676091 - http://www.securityfocus.com/bid/67121 - http://secunia.com/advisories/59480 - http://marc.info/?l=bugtraq&m=140119284401582&w=2 - http://secunia.com/advisories/59479 - http://secunia.com/advisories/59704 - http://secunia.com/advisories/58947 - http://secunia.com/advisories/59718 - http://secunia.com/advisories/59430 - http://secunia.com/advisories/58851 - https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E - https://lists.apache.org/thread.html/37e1ed724a1b0e5d191d98c822c426670bdfde83804567131847d2a3%40%3Cdevnull.infra.apache.org%3E - https://lists.apache.org/thread.html/c70da3cb6e3f03e0ad80
6670bdfde83804567131847d2a3%40%3Cdevnull.infra.apache.org%3E - https://lists.apache.org/thread.html/c70da3cb6e3f03e0ad8013e38b6959419d866c4a7c80fdd34b73f25c%40%3Ccommits.pulsar.apache.org%3E - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - https://lists.apache.org/thread.html/97fc033dad4233a5d82fcb75521eabdd23dd99ef32eb96f407f96a1a%40%3Cissues.commons.apache.org%3E - https://lists.apache.org/thread.html/8e2bdfabd5b14836aa3cf900aa0a62ff9f4e22a518bb4e553ebcf55f%40%3Cissues.commons.apache.org%3E - https://lists.apache.org/thread.html/65b39fa6d700e511927e5668a4038127432178a210aff81500eb36e5%40%3Cissues.commons.apache.org%3E - https://lists.apache.org/thread.html/0
0e511927e5668a4038127432178a210aff81500eb36e5%40%3Cissues.commons.apache.org%3E - https://lists.apache.org/thread.html/080af531a9113e29d3f6a060e3f992dc9f40315ec7234e15c3b339e3%40%3Cissues.commons.apache.org%3E - https://lists.apache.org/thread.html/ffde3f266d3bde190b54c9202169e7918a92de7e7e0337d792dc7263%40%3Cissues.commons.apache.org%3E - https://lists.apache.org/thread.html/40fc236a35801a535cd49cf1979dbeab034b833c63a284941bce5bf1%40%3Cdev.commons.apache.org%3E - https://lists.apache.org/thread.html/15fcdf27fa060de276edc0b4098526afc21c236852eb3de9be9594f3%40%3Cissues.commons.apache.org%3E - https://lists.apache.org/thread.html/4c3fd707a049bfe0577dba8fc9c4868ffcdabe68ad86586a0a49242e%40%3Cis
ns.apache.org%3E - https://lists.apache.org/thread.html/4c3fd707a049bfe0577dba8fc9c4868ffcdabe68ad86586a0a49242e%40%3Cissues.commons.apache.org%3E - https://lists.apache.org/thread.html/0340493a1ddf3660dee09a5c503449cdac5bec48cdc478de65858859%40%3Cdev.commons.apache.org%3E - https://lists.apache.org/thread.html/2ba22f2e3de945039db735cf6cbf7f8be901ab2537337c7b1dd6a0f0%40%3Cissues.commons.apache.org%3E - https://lists.apache.org/thread.html/31f9dc2c9cb68e390634a4202f84b8569f64b6569bfcce46348fd9fd%40%3Ccommits.commons.apache.org%3E - https://lists.apache.org/thread.html/098e9aae118ac5c06998a9ba4544ab2475162981d290fdef88e6f883%40%3Cissues.commons.apache.org%3E - https://lists.apache.org/thread.h
ae118ac5c06998a9ba4544ab2475162981d290fdef88e6f883%40%3Cissues.commons.apache.org%3E - https://lists.apache.org/thread.html/fda473f46e51019a78ab217a7a3a3d48dafd90846e75bd5536ef72f3%40%3Cnotifications.commons.apache.org%3E - https://lists.apache.org/thread.html/c24c0b931632a397142882ba248b7bd440027960f22845c6f664c639%40%3Ccommits.commons.apache.org%3E - https://lists.apache.org/thread.html/42ad6326d62ea8453d0d0ce12eff39bbb7c5b4fca9639da007291346%40%3Cissues.commons.apache.org%3E - https://lists.apache.org/thread.html/ebc4f019798f6ce2a39f3e0c26a9068563a9ba092cdf3ece398d4e2f%40%3Cnotifications.commons.apache.org%3E - https://lists.apache.org/thread.html/df093c662b5e49fe9e38ef91f78ffab09d0839dea
0%3Cnotifications.commons.apache.org%3E - https://lists.apache.org/thread.html/df093c662b5e49fe9e38ef91f78ffab09d0839dea7df69a747dffa86%40%3Cdev.commons.apache.org%3E - https://lists.apache.org/thread.html/9b5505632f5683ee17bda4f7878525e672226c7807d57709283ffa64%40%3Cissues.commons.apache.org%3E - https://lists.apache.org/thread.html/cee6b1c4533be1a753614f6a7d7c533c42091e7cafd7053b8f62792a%40%3Cissues.commons.apache.org%3E - https://lists.apache.org/thread.html/df1c385f2112edffeff57a6b21d12e8d24031a9f578cb8ba22a947a8%40%3Cissues.commons.apache.org%3E - https://lists.apache.org/thread.html/2454e058fd05ba30ca29442fdeb7ea47505d47a888fbc9f3a53f31d0%40%3Cissues.commons.apache.org%3E - https://lis
org/thread.html/2454e058fd05ba30ca29442fdeb7ea47505d47a888fbc9f3a53f31d0%40%3Cissues.commons.apache.org%3E - https://lists.apache.org/thread.html/869c08899f34c1a70c9fb42f92ac0d043c98781317e0c19d7ba3f5e3%40%3Cissues.commons.apache.org%3E - https://lists.apache.org/thread.html/084ae814e69178d2ce174cfdf149bc6e46d7524f3308c08d3adb43cb%40%3Cissues.commons.apache.org%3E - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - https://lists.apache.org/thread.html/f3682772e62926b5c009eed63c62767021be6da0bb7427610751809f%40%3Cissues.commons.apache.org%3E - https://lists.apache.org/thread.html/aa4ca069c7aea5b1d7329bc21576c44a39bcc4eb7bb2760c4b16f2f6%40%3Cissues.commons.apache.o
tps://lists.apache.org/thread.html/aa4ca069c7aea5b1d7329bc21576c44a39bcc4eb7bb2760c4b16f2f6%40%3Cissues.commons.apache.org%3E - https://lists.apache.org/thread.html/88c497eead24ed517a2bb3159d3dc48725c215e97fe7a98b2cf3ea25%40%3Cdev.commons.apache.org%3E - https://lists.apache.org/thread.html/0a35108a56e2d575e3b3985588794e39fbf264097aba66f4c5569e4f%40%3Cuser.commons.apache.org%3E - https://lists.apache.org/thread.html/918ec15a80fc766ff46c5d769cb8efc88fed6674faadd61a7105166b%40%3Cannounce.apache.org%3E - https://lists.apache.org/thread.html/c7e31c3c90b292e0bafccc4e1b19c9afc1503a65d82cb7833dfd7478%40%3Cissues.commons.apache.org%3E - https://lists.apache.org/thread.html/d27c51b3c933f885460aa6d300
3a65d82cb7833dfd7478%40%3Cissues.commons.apache.org%3E - https://lists.apache.org/thread.html/d27c51b3c933f885460aa6d3004eb228916615caaaddbb8e8bfeeb40%40%3Cgitbox.activemq.apache.org%3E - https://lists.apache.org/thread.html/3f500972dceb48e3cb351f58565aecf6728b1ea7a69593af86c30b30%40%3Cissues.activemq.apache.org%3E - https://lists.apache.org/thread.html/1565e8b786dff4cb3b48ecc8381222c462c92076c9e41408158797b5%40%3Ccommits.commons.apache.org%3E - https://lists.apache.org/thread.html/956995acee0d8bc046f1df0a55b7fbeb65dd2f82864e5de1078bacb0%40%3Cissues.commons.apache.org%3E - https://lists.apache.org/thread.html/1f78f1e32cc5614ec0c5b822ba4bd7fc8e8b5c46c8e038b6bd609cb5%40%3Cissues.commons.apache
https://lists.apache.org/thread.html/1f78f1e32cc5614ec0c5b822ba4bd7fc8e8b5c46c8e038b6bd609cb5%40%3Cissues.commons.apache.org%3E - https://lists.apache.org/thread.html/0efed939139f5b9dcd62b8acf7cb8a9789227d14abdc0c6f141c4a4c%40%3Cissues.activemq.apache.org%3E - https://lists.apache.org/thread.html/09981ae3df188a2ad1ce20f62ef76a5b2d27cf6b9ebab366cf1d6cc6%40%3Cissues.commons.apache.org%3E - https://lists.apache.org/thread.html/6b30629b32d020c40d537f00b004d281c37528d471de15ca8aec2cd4%40%3Cissues.commons.apache.org%3E - https://lists.apache.org/thread.html/6afe2f935493e69a332b9c5a4f23cafe95c15ede1591a492cf612293%40%3Cissues.commons.apache.org%3E - https://access.redhat.com/errata/RHSA-2019:2995 -
5a4f23cafe95c15ede1591a492cf612293%40%3Cissues.commons.apache.org%3E - https://access.redhat.com/errata/RHSA-2019:2995 - https://lists.apache.org/thread.html/66176fa3caeca77058d9f5b0316419a43b4c3fa2b572e05b87132226%40%3Cissues.commons.apache.org%3E - https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E - https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea
869b4d798e13cc%40%3Cissues.drill.apache.org%3E - https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E - https://lists.apache.org/thread.html/r75d67108e557bb5d4c4318435067714a0180de525314b7e8dab9d04e%40%3Cissues.activemq.apache.org%3E - https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5%40%3Csolr-user.lucene.apache.org%3E - https://lists.apache.org/thread.html/rf5230a049d989dbfdd404b4320a265dceeeba459a4d04ec21873bd55%40%3Csolr-user.lucene.apache.org%3E - https://lists.apache.org/thread.html/r458d61eaeadecaad04382ebe583230bc027f48d9e85e4731bc573477%40%3Ccommits.dolphinscheduler
s://lists.apache.org/thread.html/r458d61eaeadecaad04382ebe583230bc027f48d9e85e4731bc573477%40%3Ccommits.dolphinscheduler.apache.org%3E
CVE ID: CVE-2014-0115 State: PUBLISHED Published: 2017-10-30T16:00:00 Last Updated: 2024-08-06T09:05:38.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the log viewer in Apache Storm 0.9.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter to log. Additional Analyst Notes: - CVE Program Container: References: - https://mail-archives.apache.org/mod_mbox/storm-dev/201404.mbox/%3CJIRA.12704141.1395964296891.201561.1398799995645%40arcas%3E - https://issues.apache.org/jira/browse/STORM-269
CVE ID: CVE-2014-0116 State: PUBLISHED Published: 2014-05-08T10:00:00 Last Updated: 2024-08-06T09:05:38.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: CookieInterceptor in Apache Struts 2.x before 2.3.20, when a wildcard cookiesName value is used, does not properly restrict access to the getClass method, which allows remote attackers to "manipulate" the ClassLoader and modify session state via a crafted request. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-0113. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67218 - http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html - http:
tp://www.securityfocus.com/bid/67218 - http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-350733.htm - http://struts.apache.org/release/2.3.x/docs/s2-022.html - http://secunia.com/advisories/59816
CVE ID: CVE-2014-0117 State: PUBLISHED Published: 2014-07-20T10:00:00 Last Updated: 2024-08-06T09:05:38.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mod_proxy module in the Apache HTTP Server 2.4.x before 2.4.10, when a reverse proxy is enabled, allows remote attackers to cause a denial of service (child-process crash) via a crafted HTTP Connection header. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1120599 - http://advisories.mageia.org/MGASA-2014-0305.html - https://support.apple.com/HT204659 - http://httpd.apache.org/security/vulnerabilities_24.html - http://svn.apache.org/viewvc/httpd/httpd/trunk/modu
T204659 - http://httpd.apache.org/security/vulnerabilities_24.html - http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/proxy_util.c?r1=1609680&r2=1610674&diff_format=h - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://zerodayinitiative.com/advisories/ZDI-14-239/ - http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/proxy_util.c - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/mod_proxy_http.c - http://seclists.org/fulldisclosure/2014/Jul/117 - http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/mod_proxy_http.c?r1=1599486&r2=1610674&diff_for
4/Jul/117 - http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/mod_proxy_http.c?r1=1599486&r2=1610674&diff_format=h - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f
6cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E - https://lists.apache
hread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2014-0118 State: PUBLISHED Published: 2014-07-20T10:00:00 Last Updated: 2024-08-06T09:05:39.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: The deflate_in_filter function in mod_deflate.c in the mod_deflate module in the Apache HTTP Server before 2.4.10, when request body decompression is enabled, allows remote attackers to cause a denial of service (resource consumption) via crafted request data that decompresses to a much larger size. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=144493176821532&w=2 - http://advisories.mageia.org/MGASA-2014-0305.html - http://www.debian.org/security/2014/dsa-2989 - http://marc.inf
w=2 - http://advisories.mageia.org/MGASA-2014-0305.html - http://www.debian.org/security/2014/dsa-2989 - http://marc.info/?l=bugtraq&m=144050155601375&w=2 - https://support.apple.com/HT204659 - http://httpd.apache.org/security/vulnerabilities_24.html - http://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x/CHANGES - https://security.gentoo.org/glsa/201504-03 - http://rhn.redhat.com/errata/RHSA-2014-1020.html - http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/filters/mod_deflate.c - https://puppet.com/security/cve/cve-2014-0118 - http://marc.info/?l=bugtraq&m=143748090628601&w=2 - http://marc.info/?l=bugtraq&m=143403519711434&w=2 - http://www.oracle.com/technetwork/topics/security/c
8090628601&w=2 - http://marc.info/?l=bugtraq&m=143403519711434&w=2 - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/filters/mod_deflate.c?r1=1604353&r2=1610501&diff_format=h - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246 - http://rhn.redhat.com/errata/RHSA-2014-1021.html - http://marc.info/?l=bugtraq&m=144493176821532&w=2 - http://www.securityfocus.com/bid/68745 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - http://www.mandriva.com/security/advisories?name=MDVSA-2014:142 - https://bugzilla.redhat.com/show_bug.cgi?id=1120601 - http://rhn
.mandriva.com/security/advisories?name=MDVSA-2014:142 - https://bugzilla.redhat.com/show_bug.cgi?id=1120601 - http://rhn.redhat.com/errata/RHSA-2014-1019.html - http://advisories.mageia.org/MGASA-2014-0304.html - http://marc.info/?l=bugtraq&m=143403519711434&w=2 - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3
e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lis
che.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7
a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/
94d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2014-0119 State: PUBLISHED Published: 2014-05-31T10:00:00 Last Updated: 2024-08-06T09:05:39.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tomcat before 6.0.40, 7.x before 7.0.54, and 8.x before 8.0.6 does not properly constrain the class loader that accesses the XML parser used with an XSLT stylesheet, which allows remote attackers to (1) read arbitrary files via a crafted web application that provides an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, or (2) read files associated with different web applications on a single Tomcat instance via a crafted web application. Additional Ana