Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-3422 State: PUBLISHED Published: 2012-08-07T21:00:00 Last Updated: 2024-08-06T20:05:12.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: The getFirstInTableInstance function in the IcedTea-Web plugin before 1.2.1 returns an uninitialized pointer when the instance_to_id_map hash is empty, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted web page, which causes an uninitialized memory location to be read. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201406-32.xml - http://icedtea.classpath.org/hg/release/icedtea-web-1.2/file/icedtea-web-1.2.
urity.gentoo.org/glsa/glsa-201406-32.xml - http://icedtea.classpath.org/hg/release/icedtea-web-1.2/file/icedtea-web-1.2.1/NEWS - https://bugzilla.redhat.com/show_bug.cgi?id=840592 - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00020.html - http://www.ubuntu.com/usn/USN-1521-1 - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00013.html - http://lists.opensuse.org/opensuse-updates/2013-05/msg00032.html - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00004.html - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00003.html - http://lists.opensuse.org/o
msg00004.html - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00003.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00101.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00030.html - http://rhn.redhat.com/errata/RHSA-2012-1132.html - http://secunia.com/advisories/50089
CVE ID: CVE-2012-3423 State: PUBLISHED Published: 2012-08-07T21:00:00 Last Updated: 2024-08-06T20:05:12.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IcedTea-Web plugin before 1.2.1 does not properly handle NPVariant NPStrings without NUL terminators, which allows remote attackers to cause a denial of service (crash), obtain sensitive information from memory, or execute arbitrary code via a crafted Java applet. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201406-32.xml - http://icedtea.classpath.org/hg/release/icedtea-web-1.2/file/icedtea-web-1.2.1/NEWS - http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=863 -
org/hg/release/icedtea-web-1.2/file/icedtea-web-1.2.1/NEWS - http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=863 - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00020.html - http://www.ubuntu.com/usn/USN-1521-1 - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00005.html - https://bugzilla.redhat.com/show_bug.cgi?id=841345 - http://icedtea.classpath.org/hg/release/icedtea-web-1.2/rev/d65bd94e0ba9 - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00013.html - http://lists.opensuse.org/opensuse-updates/2013-05/msg00032.html - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00004.html - http://icedtea.classpath.org/hg/relea
tml - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00004.html - http://icedtea.classpath.org/hg/release/icedtea-web-1.2/rev/d7375e2a9076 - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00003.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00101.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00030.html - http://rhn.redhat.com/errata/RHSA-2012-1132.html - http://secunia.com/advisories/50089 - http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=518
CVE ID: CVE-2012-3424 State: PUBLISHED Published: 2012-08-08T10:00:00 Last Updated: 2024-08-06T20:05:12.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: The decode_credentials method in actionpack/lib/action_controller/metal/http_authentication.rb in Ruby on Rails 3.x before 3.0.16, 3.1.x before 3.1.7, and 3.2.x before 3.2.7 converts Digest Authentication strings to symbols, which allows remote attackers to cause a denial of service by leveraging access to an application that uses a with_http_digest helper method, as demonstrated by the authenticate_or_request_with_http_digest method. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/gr
t_with_http_digest method. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/group/rubyonrails-security/msg/244d32f2fa25147d?hl=en&dmode=source&output=gplain - http://weblog.rubyonrails.org/2012/7/26/ann-rails-3-2-7-has-been-released/ - http://lists.opensuse.org/opensuse-updates/2012-08/msg00046.html - http://rhn.redhat.com/errata/RHSA-2013-0154.html
CVE ID: CVE-2012-3425 State: PUBLISHED Published: 2012-08-13T20:00:00 Last Updated: 2024-08-06T20:05:12.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: The png_push_read_zTXt function in pngpread.c in libpng 1.0.x before 1.0.58, 1.2.x before 1.2.48, 1.4.x before 1.4.10, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service (out-of-bounds read) via a large avail_in field value in a PNG image. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/07/24/3 - http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=blob%3Bf=CHANGES%3Bh=73e2ffd6a1471f2144d0ce7165d7323cb109f10f%3Bhb=refs/he
eforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=blob%3Bf=CHANGES%3Bh=73e2ffd6a1471f2144d0ce7165d7323cb109f10f%3Bhb=refs/heads/libpng15 - http://www.openwall.com/lists/oss-security/2012/07/24/5 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668082 - http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=blob%3Bf=CHANGES%3Bh=2da5a7a8b690e257f94353b5b49d493cdc385322%3Bhb=refs/heads/libpng14 - http://lists.opensuse.org/opensuse-updates/2012-08/msg00004.html - http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=blob%3Bf=CHANGES%3Bh=284de253b1561b976291ba7405acd71ae71ff597%3Bhb=refs/heads/libpng10 - http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3
976291ba7405acd71ae71ff597%3Bhb=refs/heads/libpng10 - http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=blob%3Bf=CHANGES%3Bhb=a4b640865ae47986bbe71ecc0e7d5181dcb0bac8 - http://www.ubuntu.com/usn/USN-2815-1
CVE ID: CVE-2012-3426 State: PUBLISHED Published: 2012-07-31T10:00:00 Last Updated: 2024-08-06T20:05:12.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Keystone before 2012.1.1, as used in OpenStack Folsom before Folsom-1 and OpenStack Essex, does not properly implement token expiration, which allows remote authenticated users to bypass intended authorization restrictions by (1) creating new tokens through token chaining, (2) leveraging possession of a token for a disabled user account, or (3) leveraging possession of a token for an account with a changed password. Additional Analyst Notes: - CVE Program Container: References: - http://github.com/openstack/keystone/
changed password. Additional Analyst Notes: - CVE Program Container: References: - http://github.com/openstack/keystone/commit/d9600434da14976463a0bd03abd8e0309f0db454 - http://github.com/openstack/keystone/commit/29e74e73a6e51cffc0371b32354558391826a4aa - https://bugs.launchpad.net/keystone/+bug/998185 - https://bugs.launchpad.net/keystone/+bug/997194 - https://launchpad.net/keystone/essex/2012.1.1/+download/keystone-2012.1.1.tar.gz - http://secunia.com/advisories/50494 - http://github.com/openstack/keystone/commit/ea03d05ed5de0c015042876100d37a6a14bf56de - https://bugs.launchpad.net/keystone/+bug/996595 - http://www.openwall.com/lists/oss-security/2012/07/27/4 - http://github.com/openstack
unchpad.net/keystone/+bug/996595 - http://www.openwall.com/lists/oss-security/2012/07/27/4 - http://github.com/openstack/keystone/commit/628149b3dc6b58b91fd08e6ca8d91c728ccb8626 - http://www.ubuntu.com/usn/USN-1552-1 - http://github.com/openstack/keystone/commit/375838cfceb88cacc312ff6564e64eb18ee6a355 - http://github.com/openstack/keystone/commit/a67b24878a6156eab17b9098fa649f0279256f5d - http://secunia.com/advisories/50045
CVE ID: CVE-2012-3427 State: PUBLISHED Published: 2014-02-02T20:00:00 Last Updated: 2024-08-06T20:05:12.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: EC2 Amazon Machine Image (AMI) in JBoss Enterprise Application Platform (EAP) 5.1.2 uses 755 permissions for /var/cache/jboss-ec2-eap/, which allows local users to read sensitive information such as Amazon Web Services (AWS) credentials by reading files in the directory. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1376.html - http://www.securityfocus.com/bid/55945 - http://secunia.com/advisories/51016 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79398 - http
.com/bid/55945 - http://secunia.com/advisories/51016 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79398 - http://www.osvdb.org/86409
CVE ID: CVE-2012-3428 State: PUBLISHED Published: 2012-12-20T11:00:00 Last Updated: 2024-08-06T20:05:12.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IronJacamar container before 1.0.12.Final for JBoss Application Server, when allow-multiple-users is enabled in conjunction with a security domain, does not use the credentials supplied in a getConnection function call, which allows remote attackers to obtain access to an arbitrary datasource connection in opportunistic circumstances via an invalid connection attempt. Additional Analyst Notes: - CVE Program Container: References: - https://issues.jboss.org/browse/JBPAPP-9584 - http://rhn.redhat.com/errata/RHSA-2012-1594.ht
am Container: References: - https://issues.jboss.org/browse/JBPAPP-9584 - http://rhn.redhat.com/errata/RHSA-2012-1594.html - https://issues.jboss.org/browse/JBJCA-864 - http://secunia.com/advisories/51607 - https://issues.jboss.org/secure/ReleaseNote.jspa?projectId=12310691&version=12319522 - https://bugzilla.redhat.com/show_bug.cgi?id=843358 - http://rhn.redhat.com/errata/RHSA-2012-1592.html - http://rhn.redhat.com/errata/RHSA-2012-1591.html
CVE ID: CVE-2012-3429 State: PUBLISHED Published: 2012-08-07T21:00:00 Last Updated: 2024-08-06T20:05:12.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dns_to_ldap_dn_escape function in src/ldap_convert.c in bind-dyndb-ldap 1.1.0rc1 and earlier does not properly escape distinguished names (DN) for LDAP queries, which allows remote DNS servers to cause a denial of service (named service hang) via a "$" character in a DN in a DNS query. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027341 - http://git.fedorahosted.org/cgit/bind-dyndb-ldap.git/commit/?id=f345805c73c294db42452ae966c48fbc36c48006 - http://rhn.redhat.com/err
edorahosted.org/cgit/bind-dyndb-ldap.git/commit/?id=f345805c73c294db42452ae966c48fbc36c48006 - http://rhn.redhat.com/errata/RHSA-2012-1139.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/77391 - http://secunia.com/advisories/50159 - http://secunia.com/advisories/50086 - http://www.openwall.com/lists/oss-security/2012/08/02/5 - https://bugzilla.redhat.com/show_bug.cgi?id=842466 - http://www.securityfocus.com/bid/54787
CVE ID: CVE-2012-3430 State: PUBLISHED Published: 2012-10-03T10:00:00 Last Updated: 2024-08-06T20:05:12.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rds_recvmsg function in net/rds/recv.c in the Linux kernel before 3.0.44 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a (1) recvfrom or (2) recvmsg system call on an RDS socket. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1572-1 - http://www.ubuntu.com/usn/USN-1579-1 - http://www.ubuntu.com/usn/USN-1578-1 - http://secunia.com/advisories/50732 - http://secunia.com/advisories
/USN-1579-1 - http://www.ubuntu.com/usn/USN-1578-1 - http://secunia.com/advisories/50732 - http://secunia.com/advisories/50811 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.0.44 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=06b6a1cf6e776426766298d055bb3991957d90a7 - http://www.ubuntu.com/usn/USN-1567-1 - http://rhn.redhat.com/errata/RHSA-2012-1323.html - https://bugzilla.redhat.com/show_bug.cgi?id=820039 - http://www.ubuntu.com/usn/USN-1577-1 - https://www.suse.com/support/update/announcement/2012/suse-su-20121679-1.html - http://www.ubuntu.com/usn/USN-1568-1 - http://www.ubuntu.com/usn/USN-1575-1 - https://github.com/torvalds/linux/commit/06b6
p://www.ubuntu.com/usn/USN-1568-1 - http://www.ubuntu.com/usn/USN-1575-1 - https://github.com/torvalds/linux/commit/06b6a1cf6e776426766298d055bb3991957d90a7 - http://secunia.com/advisories/50633 - http://www.ubuntu.com/usn/USN-1580-1 - http://www.openwall.com/lists/oss-security/2012/07/26/5
CVE ID: CVE-2012-3431 State: PUBLISHED Published: 2012-11-23T20:00:00 Last Updated: 2024-08-06T20:05:12.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Teiid Java Database Connectivity (JDBC) socket, as used in JBoss Enterprise Data Services Platform before 5.3.0, does not encrypt login messages by default contrary to documentation and specification, which allows remote attackers to obtain login credentials via a man-in-the-middle (MITM) attack. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78803 - http://rhn.redhat.com/errata/RHSA-2012-1301.html - https://bugzilla.redhat.com/show_bug.cgi?id=843669 -
ilities/78803 - http://rhn.redhat.com/errata/RHSA-2012-1301.html - https://bugzilla.redhat.com/show_bug.cgi?id=843669 - http://www.securityfocus.com/bid/55634
CVE ID: CVE-2012-3432 State: PUBLISHED Published: 2012-12-03T21:00:00 Last Updated: 2024-08-06T20:05:12.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: The handle_mmio function in arch/x86/hvm/io.c in the MMIO operations emulator for Xen 3.3 and 4.x, when running an HVM guest, does not properly reset certain state information between emulation cycles, which allows local guest OS users to cause a denial of service (guest OS crash) via unspecified operations on MMIO regions. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2012/dsa-2531 - http://secunia.com/advisories/55082 - http://lists.xen.org/archives/html/xen-devel/2012-07/msg
/security/2012/dsa-2531 - http://secunia.com/advisories/55082 - http://lists.xen.org/archives/html/xen-devel/2012-07/msg01649.html - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00025.html - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00024.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html - http://www.securityfocus.com/bid/54691 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html
CVE ID: CVE-2012-3433 State: PUBLISHED Published: 2012-11-24T20:00:00 Last Updated: 2024-08-06T20:05:12.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU hang and kernel panic) by modifying the physical address space in a way that triggers excessive shared page search time during the p2m teardown. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2012/dsa-2531 - http://secunia.com/advisories/55082 - http://www.openwall.com/lists/oss-security/2012/08/09/3 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://lists.opensuse.org/opensu
/lists/oss-security/2012/08/09/3 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00025.html - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00024.html - http://www.securityfocus.com/bid/54942 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html - http://lists.xen.org/archives/html/xen-devel/2012-08/msg00855.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html
CVE ID: CVE-2012-3434 State: PUBLISHED Published: 2012-08-15T21:00:00Z Last Updated: 2024-09-16T23:05:49.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in userperspan.php in the Count Per Day module before 3.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) page, (2) datemin, or (3) datemax parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.darksecurity.de/advisories/2012/SSCHADV2012-015.txt - http://secunia.com/advisories/49692 - http://plugins.trac.wordpress.org/changeset/571926/count-per-day - http://www.osvdb.org/83491 - http://www.openwall.com/
http://plugins.trac.wordpress.org/changeset/571926/count-per-day - http://www.osvdb.org/83491 - http://www.openwall.com/lists/oss-security/2012/07/27/2 - http://www.tomsdimension.de/wp-plugins/count-per-day - http://www.openwall.com/lists/oss-security/2012/07/24/4
CVE ID: CVE-2012-3435 State: PUBLISHED Published: 2012-08-15T20:00:00 Last Updated: 2024-08-06T20:05:12.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in frontends/php/popup_bitem.php in Zabbix 1.8.15rc1 and earlier, and 2.x before 2.0.2rc1, allows remote attackers to execute arbitrary SQL commands via the itemid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/20087 - http://secunia.com/advisories/50475 - http://git.zabbixzone.com/zabbix2.0/.git/commitdiff/333a3a5542ba8a2c901c24b7bf5440f41f1f4f54 - http://www.debian.org/security/2012/dsa-2539 - https://support.zabbix.com/browse/ZBX-534
a8a2c901c24b7bf5440f41f1f4f54 - http://www.debian.org/security/2012/dsa-2539 - https://support.zabbix.com/browse/ZBX-5348 - http://secunia.com/advisories/49809 - http://www.openwall.com/lists/oss-security/2012/07/27/6 - http://www.securityfocus.com/bid/54661 - http://osvdb.org/84127 - http://www.openwall.com/lists/oss-security/2012/07/28/3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77195
CVE ID: CVE-2012-3436 State: PUBLISHED Published: 2012-10-09T18:00:00 Last Updated: 2024-08-06T20:05:12.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenTTD 0.6.0 through 1.2.1 does not properly validate requests to clear a water tile, which allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a certain sequence of steps related to "the water/coast aspect of tiles which also have railtracks on one half." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50042 - http://security.openttd.org/en/CVE-2012-3436 - http://www.openwall.com/lists/oss-security/2012/07/28/7 - http://lists.open
tp://security.openttd.org/en/CVE-2012-3436 - http://www.openwall.com/lists/oss-security/2012/07/28/7 - http://lists.opensuse.org/opensuse-updates/2012-08/msg00043.html - http://www.securityfocus.com/bid/54720 - http://www.openwall.com/lists/oss-security/2012/07/31/5 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77266 - http://vcs.openttd.org/svn/changeset/24449 - http://bugs.openttd.org/task/5254 - http://www.openwall.com/lists/oss-security/2012/07/27/5 - http://vcs.openttd.org/svn/changeset/24439
CVE ID: CVE-2012-3437 State: PUBLISHED Published: 2012-08-07T21:00:00 Last Updated: 2024-08-06T20:05:12.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Magick_png_malloc function in coders/png.c in ImageMagick 6.7.8 and earlier does not use the proper variable type for the allocation size, which might allow remote attackers to cause a denial of service (crash) via a crafted PNG file that triggers incorrect memory allocation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/54714 - https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0243 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77260 - https://bugzilla.red
n/Support/Advisories/MGASA-2012-0243 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77260 - https://bugzilla.redhat.com/show_bug.cgi?id=844101 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:092 - http://www.securitytracker.com/id?1027321 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:160 - http://lists.opensuse.org/opensuse-updates/2013-03/msg00101.html - http://secunia.com/advisories/50398 - http://secunia.com/advisories/50091 - http://www.ubuntu.com/usn/USN-1544-1
CVE ID: CVE-2012-3438 State: PUBLISHED Published: 2012-08-07T21:00:00 Last Updated: 2024-08-06T20:05:12.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Magick_png_malloc function in coders/png.c in GraphicsMagick 6.7.8-6 does not use the proper variable type for the allocation size, which might allow remote attackers to cause a denial of service (crash) via a crafted PNG file that triggers incorrect memory allocation. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2012:165 - http://graphicsmagick.hg.sourceforge.net/hgweb/graphicsmagick/graphicsmagick/rev/d6e469d02cd2 - http://secunia.com/advisories/5
graphicsmagick.hg.sourceforge.net/hgweb/graphicsmagick/graphicsmagick/rev/d6e469d02cd2 - http://secunia.com/advisories/50090 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77259 - http://lists.opensuse.org/opensuse-updates/2013-03/msg00102.html - http://www.securityfocus.com/bid/54716 - https://bugzilla.redhat.com/show_bug.cgi?id=844105
CVE ID: CVE-2012-3439 State: REJECTED Published: 2012-11-17T19:00:00Z Last Updated: 2024-09-16T19:35:53.174Z Description: No description available.
CVE ID: CVE-2012-3440 State: PUBLISHED Published: 2012-08-08T10:00:00 Last Updated: 2024-08-06T20:05:12.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain Red Hat script for sudo 1.7.2 on Red Hat Enterprise Linux (RHEL) 5 allows local users to overwrite arbitrary files via a symlink attack on the /var/tmp/nsswitch.conf.bak temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - https://bugzilla.redhat.com/show_bug.cgi?id=844442 - http://www.securityfocus.com/bid/54868
CVE ID: CVE-2012-3441 State: PUBLISHED Published: 2012-08-25T10:00:00 Last Updated: 2024-08-06T20:05:12.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: The database creation script (module/idoutils/db/scripts/create_mysqldb.sh) in Icinga 1.7.1 grants access to all databases to the icinga user, which allows icinga users to access other databases via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/07/30/7 - https://git.icinga.org/?p=icinga-core.git%3Ba=commitdiff%3Bh=dcd45fb6931c4abf710829bee21af09f842bc281 - https://git.icinga.org/?p=icinga-core.git%3Ba=commitdiff%3Bh=712813d3118a5b9e5a496179
931c4abf710829bee21af09f842bc281 - https://git.icinga.org/?p=icinga-core.git%3Ba=commitdiff%3Bh=712813d3118a5b9e5a496179cab81dbe91f69d63 - http://www.openwall.com/lists/oss-security/2012/07/30/6 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78874 - https://git.icinga.org/?p=icinga-doc.git%3Ba=commitdiff%3Bh=619a08ca1178144b8a3a5caafff32a2d3918edab - http://lists.opensuse.org/opensuse-updates/2012-08/msg00012.html - https://bugzilla.novell.com/show_bug.cgi?id=767319