Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-5176 State: PUBLISHED Published: 2014-07-31T14:00:00 Last Updated: 2024-08-06T11:34:37.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP FI Manager Self-Service has a hard-coded user name, which makes it easier for remote attackers to obtain access via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://service.sap.com/sap/support/notes/1929473 - http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-024 - http://www.securityfocus.com/bid/68951 - http://seclists.org/fulldisclosure/2014/Jul/152 - http://www.securityfocus.com/archive/1/532945/100/0/threaded - http://secunia.com/advisories/59605 - https://exch
/152 - http://www.securityfocus.com/archive/1/532945/100/0/threaded - http://secunia.com/advisories/59605 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94923 - http://scn.sap.com/docs/DOC-8218 - http://packetstormsecurity.com/files/127669/SAP-FI-Manager-Self-Service-Hardcoded-Username.html
CVE ID: CVE-2014-5177 State: PUBLISHED Published: 2014-08-03T18:00:00 Last Updated: 2024-08-06T11:34:37.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: libvirt 1.0.0 through 1.2.x before 1.2.5, when fine grained access control is enabled, allows local users to read arbitrary files via a crafted XML document containing an XML external entity declaration in conjunction with an entity reference to the (1) virDomainDefineXML, (2) virNetworkCreateXML, (3) virNetworkDefineXML, (4) virStoragePoolCreateXML, (5) virStoragePoolDefineXML, (6) virStorageVolCreateXML, (7) virDomainCreateXML, (8) virNodeDeviceCreateXML, (9) virInterfaceDefineXML, (10) virStorageVolCreateXMLFrom, (11) virCo
) virDomainCreateXML, (8) virNodeDeviceCreateXML, (9) virInterfaceDefineXML, (10) virStorageVolCreateXMLFrom, (11) virConnectDomainXMLFromNative, (12) virConnectDomainXMLToNative, (13) virSecretDefineXML, (14) virNWFilterDefineXML, (15) virDomainSnapshotCreateXML, (16) virDomainSaveImageDefineXML, (17) virDomainCreateXMLWithFiles, (18) virConnectCompareCPU, or (19) virConnectBaselineCPU API method, related to an XML External Entity (XXE) issue. NOTE: this issue was SPLIT from CVE-2014-0179 per ADT3 due to different affected versions of some vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0560.html - http://libvirt.org/news.html
: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0560.html - http://libvirt.org/news.html - http://secunia.com/advisories/60895 - http://security.gentoo.org/glsa/glsa-201412-04.xml - http://lists.opensuse.org/opensuse-updates/2014-05/msg00052.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00048.html - http://www.ubuntu.com/usn/USN-2366-1 - http://security.libvirt.org/2014/0003.html
CVE ID: CVE-2014-5178 State: PUBLISHED Published: 2014-08-06T18:00:00 Last Updated: 2024-08-06T11:34:37.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Easy File Sharing (EFS) Web Server 6.8 allow remote authenticated users to inject arbitrary web script or HTML via the content parameter when (1) creating a topic or (2) posting an answer. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127622/Easy-File-Sharing-Persistent-Cross-Site-Scripting.html - http://secunia.com/advisories/60524 - https://excha
iles/127622/Easy-File-Sharing-Persistent-Cross-Site-Scripting.html - http://secunia.com/advisories/60524 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94887 - http://www.securityfocus.com/archive/1/532897/100/0/threaded
CVE ID: CVE-2014-5179 State: PUBLISHED Published: 2014-08-06T18:00:00 Last Updated: 2024-08-06T11:34:37.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: The freelinking module for Drupal, as used in the Freelinking for Case Tracker module, does not properly check access permissions for (1) nodes or (2) users, which allows remote attackers to obtain sensitive information via a crafted link. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/94870 - https://www.drupal.org/node/2308503 - http://www.securityfocus.com/bid/68861
CVE ID: CVE-2014-5180 State: PUBLISHED Published: 2014-08-06T19:00:00Z Last Updated: 2024-09-17T03:28:00.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the videos page in the HDW Player Plugin (hdw-player-video-player-video-gallery) 2.4.2 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in the edit action to wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-hdw-player-video-player-video-gallery-a1-injection - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=900030%40hdw-pl
-gallery-a1-injection - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=900030%40hdw-player-video-player-video-gallery&old=798976%40hdw-player-video-player-video-gallery&sfp_email=&sfph_mail=
CVE ID: CVE-2014-5181 State: PUBLISHED Published: 2014-08-06T19:00:00Z Last Updated: 2024-09-16T23:55:42.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in lastfm-proxy.php in the Last.fm Rotation (lastfm-rotation) plugin 1.0 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the snode parameter. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-lastfm-rotation-local-file-inclusion
CVE ID: CVE-2014-5182 State: PUBLISHED Published: 2014-08-06T19:00:00Z Last Updated: 2024-09-17T03:28:45.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the yawpp plugin 1.2 for WordPress allow remote authenticated users with Contributor privileges to execute arbitrary SQL commands via vectors related to (1) admin_functions.php or (2) admin_update.php, as demonstrated by the id parameter in the update action to wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=834445%40yawpp&old=824042%40yawpp&sfp_email=&sfph_mail=#file3
ordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=834445%40yawpp&old=824042%40yawpp&sfp_email=&sfph_mail=#file36 - http://codevigilant.com/disclosure/wp-plugin-yawpp-a1-injection - http://wordpress.org/plugins/yawpp/changelog/
CVE ID: CVE-2014-5183 State: PUBLISHED Published: 2014-08-06T19:00:00Z Last Updated: 2024-09-17T01:46:29.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in includes/mode-edit.php in the Simple Retail Menus (simple-retail-menus) plugin before 4.1 for WordPress allows remote authenticated editors to execute arbitrary SQL commands via the targetmenu parameter in an edit action to wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-simple-retail-menus-a1-injection - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=861170%40simple-retail-menus&o
ection - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=861170%40simple-retail-menus&old=728969%40simple-retail-menus&sfp_email=&sfph_mail=#file1
CVE ID: CVE-2014-5184 State: PUBLISHED Published: 2014-08-06T19:00:00Z Last Updated: 2024-09-17T01:21:23.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the stripshow-storylines page in the stripShow plugin 2.5.2 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the story parameter in an edit action to wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-stripshow-a1-injection
CVE ID: CVE-2014-5185 State: PUBLISHED Published: 2014-08-06T19:00:00Z Last Updated: 2024-09-16T19:09:51.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Quartz plugin 1.01.1 for WordPress allows remote authenticated users with Contributor privileges to execute arbitrary SQL commands via the quote parameter in an edit action in the quartz/quote_form.php page to wp-admin/edit.php. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-quartz-a1-injection
CVE ID: CVE-2014-5186 State: PUBLISHED Published: 2014-08-06T19:00:00Z Last Updated: 2024-09-16T17:32:55.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the All Video Gallery (all-video-gallery) plugin 1.2 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in an edit action in the allvideogallery_videos page to wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-all-video-gallery-a1-injection
CVE ID: CVE-2014-5187 State: PUBLISHED Published: 2014-08-06T19:00:00Z Last Updated: 2024-09-17T03:48:17.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Tom M8te (tom-m8te) plugin 1.5.3 for WordPress allows remote attackers to read arbitrary files via the file parameter to tom-download-file.php. Additional Analyst Notes: - CVE Program Container: References: - http://codevigilant.com/disclosure/wp-plugin-tom-m8te-local-file-inclusion
CVE ID: CVE-2014-5188 State: PUBLISHED Published: 2014-08-07T10:00:00 Last Updated: 2024-08-06T11:34:37.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in doemailpassword.tml in Lyris ListManager (LM) 8.95a allows remote attackers to inject arbitrary web script or HTML via the EmailAddr parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127672/Lyris-ListManagerWeb-8.95a-Cross-Site-Scripting.html - http://xerosecurity.com/?p=94 - http://www.securityfocus.com/bid/68973 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95024
CVE ID: CVE-2014-5189 State: PUBLISHED Published: 2014-08-07T10:00:00 Last Updated: 2024-08-06T11:34:37.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in lib/optin/optin_page.php in the Lead Octopus plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/show/osvdb/109642 - http://packetstormsecurity.com/files/127640/WordPress-Lead-Octopus-Power-SQL-Injection.html - http://www.securityfocus.com/bid/68934 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94912
CVE ID: CVE-2014-5190 State: PUBLISHED Published: 2014-08-07T10:00:00 Last Updated: 2024-08-06T11:34:37.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in captcha-secureimage/test/index.php in the SI CAPTCHA Anti-Spam plugin 2.7.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69011 - http://packetstormsecurity.com/files/127723/WordPress-SI-CAPTCHA-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/95104
CVE ID: CVE-2014-5191 State: PUBLISHED Published: 2014-08-07T10:00:00 Last Updated: 2024-08-06T11:34:37.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Preview plugin before 4.4.3 in CKEditor allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://ckeditor.com/node/136981 - http://secunia.com/advisories/60036 - http://www.securityfocus.com/bid/69161
CVE ID: CVE-2014-5192 State: PUBLISHED Published: 2014-08-07T10:00:00 Last Updated: 2024-08-06T11:34:37.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/admin.php in Sphider 1.3.6 allows remote attackers to execute arbitrary SQL commands via the filter parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/95016 - http://www.exploit-db.com/exploits/34189
CVE ID: CVE-2014-5193 State: PUBLISHED Published: 2014-08-07T10:00:00 Last Updated: 2024-08-06T11:34:37.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/admin.php in Sphider 1.3.6 allows remote attackers to inject arbitrary web script or HTML via the category parameter. NOTE: the url parameter vector is already covered by CVE-2014-5082. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/show/osvdb/109800 - http://osvdb.org/show/osvdb/109799 - http://www.exploit-db.com/exploits/34189
CVE ID: CVE-2014-5194 State: PUBLISHED Published: 2014-08-07T10:00:00 Last Updated: 2024-08-06T11:34:37.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in admin/admin.php in Sphider 1.3.6 allows remote authenticated users to inject arbitrary PHP code into settings/conf.php via the _word_upper_bound parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/34189 - http://packetstormsecurity.com/files/159715/Sphider-Search-Engine-1.3.6-Remote-Code-Execution.html
CVE ID: CVE-2014-5195 State: PUBLISHED Published: 2014-08-07T10:00:00 Last Updated: 2024-08-06T11:34:37.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unity before 7.2.3 and 7.3.x before 7.3.1, as used in Ubuntu, does not properly take focus of the keyboard when switching to the lock screen, which allows physically proximate attackers to bypass the lock screen by (1) leveraging a machine that had text selected when locking or (2) resuming from a suspension. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/95199 - http://www.ubuntu.com/usn/USN-2303-1 - http://www.securityfocus.com/bid/68987 - http://www.osvd
/vulnerabilities/95199 - http://www.ubuntu.com/usn/USN-2303-1 - http://www.securityfocus.com/bid/68987 - http://www.osvdb.org/109788 - https://bugs.launchpad.net/unity/7.2/+bug/1349128
CVE ID: CVE-2014-5196 State: PUBLISHED Published: 2014-08-12T20:00:00 Last Updated: 2024-08-06T11:41:47.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in improved-user-search-in-backend.php in the backend in the Improved user search in backend plugin before 1.2.5 for WordPress allows remote attackers to hijack the authentication of administrators for requests that insert XSS sequences via the iusib_meta_fields parameter. Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/plugins/improved-user-search-in-backend/changelog - http://secunia.com/advisories/60590 - https://security.dxw.com/advisorie
ins/improved-user-search-in-backend/changelog - http://secunia.com/advisories/60590 - https://security.dxw.com/advisories/csrf-and-xss-in-improved-user-search-allow-execution-of-arbitrary-javascript-in-wordpress-admin-area/
CVE ID: CVE-2014-5197 State: PUBLISHED Published: 2014-08-12T20:00:00Z Last Updated: 2024-09-17T01:36:58.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in (1) Splunk Web or the (2) Splunkd HTTP Server in Splunk Enterprise 6.1.x before 6.1.3 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a URI, related to search ids. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59940 - http://www.splunk.com/view/SP-CAAAM9H - http://www.securitytracker.com/id/1030690
CVE ID: CVE-2014-5198 State: PUBLISHED Published: 2014-08-12T20:00:00Z Last Updated: 2024-09-16T18:12:54.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.1.x before 6.1.3 allows remote attackers to inject arbitrary web script or HTML via the Referer HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59940 - http://www.splunk.com/view/SP-CAAAM9H - http://www.securitytracker.com/id/1030690
CVE ID: CVE-2014-5199 State: PUBLISHED Published: 2014-08-12T20:00:00Z Last Updated: 2024-09-16T16:38:21.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the WordPress File Upload plugin (wp-file-upload) before 2.4.2 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/plugins/wp-file-upload/changelog - http://secunia.com/advisories/60520
CVE ID: CVE-2014-5200 State: PUBLISHED Published: 2014-08-12T20:00:00 Last Updated: 2024-08-06T11:41:47.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in game_play.php in the FB Gorilla plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/94916 - http://packetstormsecurity.com/files/127639
CVE ID: CVE-2014-5201 State: PUBLISHED Published: 2014-08-12T20:00:00 Last Updated: 2024-08-06T11:41:47.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Gallery Objects plugin 0.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the viewid parameter in a go_view_object action to wp-admin/admin-ajax.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127533/WordPress-Gallery-Objects-0.4-SQL-Injection.html - http://www.homelab.it/index.php/2014/07/18/wordpress-gallery-objects-0-4-sql-injection/#sthash.ftMVwBVK.dpbs - http://www.securityfocus.com/bid/68791
CVE ID: CVE-2014-5202 State: PUBLISHED Published: 2014-08-12T23:00:00Z Last Updated: 2024-09-16T20:47:00.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in compfight-search.php in the Compfight plugin 1.4 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the search-value parameter. Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/plugins/compfight/changelog/ - http://packetstormsecurity.com/files/127430/WordPress-Compfight-1.4-Cross-Site-Scripting.html - http://downloads.wordpress.org/plugin/compfight.1.5.zip
CVE ID: CVE-2014-5203 State: PUBLISHED Published: 2014-08-18T10:00:00 Last Updated: 2024-08-06T11:41:47.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: wp-includes/class-wp-customize-widgets.php in the widget implementation in WordPress 3.9.x before 3.9.2 might allow remote attackers to execute arbitrary code via crafted serialized data. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/news/2014/08/wordpress-3-9-2/ - https://core.trac.wordpress.org/changeset/29389 - http://openwall.com/lists/oss-security/2014/08/13/3
CVE ID: CVE-2014-5204 State: PUBLISHED Published: 2014-08-18T10:00:00 Last Updated: 2024-08-06T11:41:47.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: wp-includes/pluggable.php in WordPress before 3.9.2 rejects invalid CSRF nonces with a different timing depending on which characters in the nonce are incorrect, which makes it easier for remote attackers to bypass a CSRF protection mechanism via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-3001 - https://wordpress.org/news/2014/08/wordpress-3-9-2/ - https://core.trac.wordpress.org/changeset/29384 - http://openwall.com/lists/oss-security/2014/08/
/08/wordpress-3-9-2/ - https://core.trac.wordpress.org/changeset/29384 - http://openwall.com/lists/oss-security/2014/08/13/3
CVE ID: CVE-2014-5205 State: PUBLISHED Published: 2014-08-18T10:00:00 Last Updated: 2024-08-06T11:41:47.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: wp-includes/pluggable.php in WordPress before 3.9.2 does not use delimiters during concatenation of action values and uid values in CSRF tokens, which makes it easier for remote attackers to bypass a CSRF protection mechanism via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-3001 - https://wordpress.org/news/2014/08/wordpress-3-9-2/ - https://core.trac.wordpress.org/changeset/29408 - http://openwall.com/lists/oss-security/2014/08/13/3
CVE ID: CVE-2014-5206 State: PUBLISHED Published: 2014-08-18T10:00:00 Last Updated: 2024-08-06T11:41:47.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_remount function in fs/namespace.c in the Linux kernel through 3.16.1 does not maintain the MNT_LOCK_READONLY bit across a remount of a bind mount, which allows local users to bypass an intended read-only restriction and defeat certain sandbox protection mechanisms via a "mount -o remount" command within a user namespace. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a6138db815df5ee542d848318e5dae681590fccd - http://www.ub
l.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a6138db815df5ee542d848318e5dae681590fccd - http://www.ubuntu.com/usn/USN-2318-1 - http://www.securityfocus.com/bid/69214 - https://bugzilla.redhat.com/show_bug.cgi?id=1129662 - https://github.com/torvalds/linux/commit/a6138db815df5ee542d848318e5dae681590fccd - http://www.openwall.com/lists/oss-security/2014/08/13/4 - http://www.ubuntu.com/usn/USN-2317-1
CVE ID: CVE-2014-5207 State: PUBLISHED Published: 2014-08-18T10:00:00 Last Updated: 2024-08-06T11:41:47.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: fs/namespace.c in the Linux kernel through 3.16.1 does not properly restrict clearing MNT_NODEV, MNT_NOSUID, and MNT_NOEXEC and changing MNT_ATIME_MASK during a remount of a bind mount, which allows local users to gain privileges, interfere with backups and auditing on systems that had atime enabled, or cause a denial of service (excessive filesystem updating) on systems that had atime disabled via a "mount -o remount" command within a user namespace. Additional Analyst Notes: - CVE Program Container: References: - http://www.
o remount" command within a user namespace. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69216 - http://seclists.org/oss-sec/2014/q3/352 - https://github.com/torvalds/linux/commit/9566d6742852c527bf5af38af5cbb878dad75705 - http://www.ubuntu.com/usn/USN-2318-1 - http://osvdb.org/show/osvdb/110055 - http://www.exploit-db.com/exploits/34923 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9566d6742852c527bf5af38af5cbb878dad75705 - https://bugzilla.redhat.com/show_bug.cgi?id=1129662 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95266 - http://packetstormsecurity.com/files/128595/Linux-Kernel-3.16.1-FUS
exchange.xforce.ibmcloud.com/vulnerabilities/95266 - http://packetstormsecurity.com/files/128595/Linux-Kernel-3.16.1-FUSE-Privilege-Escalation.html - http://www.openwall.com/lists/oss-security/2014/08/13/4 - http://www.ubuntu.com/usn/USN-2317-1