Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-4240 State: PUBLISHED Published: 2019-10-28T14:45:55 Last Updated: 2024-08-07T03:34:37.818Z Vendors: Tiki Wiki Products: CMS Groupware Problem Types: UNKNOWN_TYPE Description: Tiki Wiki CMS Groupware 5.2 has XSS Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-4240 - https://access.redhat.com/security/cve/cve-2010-4240 - https://www.openwall.com/lists/oss-security/2010/11/22/9 - https://dl.packetstormsecurity.net/1009-exploits/tikiwiki52-xss.txt
CVE ID: CVE-2010-4241 State: PUBLISHED Published: 2019-10-28T14:43:05 Last Updated: 2024-08-07T03:34:37.799Z Vendors: Tiki Wiki Products: CMS Groupware Problem Types: UNKNOWN_TYPE Description: Tiki Wiki CMS Groupware 5.2 has CSRF Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-4241 - https://access.redhat.com/security/cve/cve-2010-4241 - https://dl.packetstormsecurity.net/1009-exploits/tikiwiki52-xsrf.txt - https://www.openwall.com/lists/oss-security/2010/11/22/9
CVE ID: CVE-2010-4242 State: PUBLISHED Published: 2011-01-11T01:00:00 Last Updated: 2024-08-07T03:34:37.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: The hci_uart_tty_open function in the HCI UART driver (drivers/bluetooth/hci_ldisc.c) in the Linux kernel 2.6.36, and possibly other versions, does not verify whether the tty has a write operation, which allows local users to cause a denial of service (NULL pointer dereference) via vectors related to the Bluetooth driver. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42789 - http://git.kernel.org/linus/c19483cc5e56ac5e22dd19cf25ba210ab1537773 - http://www.vupen.com/english/advis
sories/42789 - http://git.kernel.org/linus/c19483cc5e56ac5e22dd19cf25ba210ab1537773 - http://www.vupen.com/english/advisories/2011/0024 - http://www.redhat.com/support/errata/RHSA-2011-0004.html - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64617 - http://www.redhat.com/support/errata/RHSA-2011-0007.html - http://www.securityfocus.com/bid/45014 - http://secunia.com/advisories/42963 - https://bugzilla.redhat.com/show_bug.cgi?id=641410 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://www.vupen.com/english/advisories/2011/0375 - http://secunia.com/advisories/4289
/advisories/VMSA-2011-0012.html - http://www.vupen.com/english/advisories/2011/0375 - http://secunia.com/advisories/42890 - http://www.redhat.com/support/errata/RHSA-2011-0162.html - https://lkml.org/lkml/2010/10/7/255 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html - http://www.vupen.com/english/advisories/2011/0168 - http://xorl.wordpress.com/2010/12/01/cve-2010-4242-linux-kernel-bluetooth-hci-uart-invalid-pointer-access/ - http://secunia.com/advisories/43291
CVE ID: CVE-2010-4243 State: PUBLISHED Published: 2011-01-22T21:00:00 Last Updated: 2024-08-07T03:34:37.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: fs/exec.c in the Linux kernel before 2.6.37 does not enable the OOM Killer to assess use of stack memory by arrays representing the (1) arguments and (2) environment, which allows local users to cause a denial of service (memory consumption) via a crafted exec system call, aka an "OOM dodging issue," a related issue to CVE-2010-3858. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2010/11/22/6 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://www.red
wall.com/lists/oss-security/2010/11/22/6 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2011-0017.html - http://secunia.com/advisories/46397 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37 - https://bugzilla.redhat.com/show_bug.cgi?id=625688 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64700 - http://lkml.org/lkml/2010/8/30/378 - http://www.exploit-db.com/exploits/15619 - http://linux.derkeiler.com/Mailing-Lists/Kernel/2010-11/msg13278.html - http://openwall.com/lists/oss-security/2010/11/22/15 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://secunia.com/advisories/42884 - http://lkml
2/15 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://secunia.com/advisories/42884 - http://lkml.org/lkml/2010/8/27/429 - http://lkml.org/lkml/2010/8/30/138 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3c77f845722158206a7209c45ccddc264d19319c - http://grsecurity.net/~spender/64bit_dos.c - http://lkml.org/lkml/2010/8/29/206 - http://www.securityfocus.com/bid/45004
CVE ID: CVE-2010-4244 State: REJECTED Published: 2017-07-24T16:00:00 Last Updated: 2017-07-24T15:57:01 Description: No description available.
CVE ID: CVE-2010-4245 State: PUBLISHED Published: 2019-10-28T14:33:05 Last Updated: 2024-08-07T03:34:37.795Z Vendors: n/a Products: n/a Problem Types: XSS via 'match_names' parameter on translate.html page Description: pootle 2.0.5 has XSS via 'match_names' parameter Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-4245 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4245 - https://access.redhat.com/security/cve/cve-2010-4245 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=604060
CVE ID: CVE-2010-4246 State: PUBLISHED Published: 2010-12-07T01:00:00Z Last Updated: 2024-09-16T21:08:26.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in graph.php in pfSense 1.2.3 and 2 beta 4 allow remote attackers to inject arbitrary web script or HTML via the (1) ifnum or (2) ifname parameter, a different vulnerability than CVE-2008-1182. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2010/11/22/18 - http://www.securityfocus.com/bid/44738 - http://openwall.com/lists/oss-security/2010/11/24/7 - http://secunia.com/advisories/42138 - http://seclists.org/fulldisclosu
://openwall.com/lists/oss-security/2010/11/24/7 - http://secunia.com/advisories/42138 - http://seclists.org/fulldisclosure/2010/Nov/43
CVE ID: CVE-2010-4247 State: PUBLISHED Published: 2011-01-11T01:00:00 Last Updated: 2024-08-07T03:34:37.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_block_io_op function in (1) drivers/xen/blkback/blkback.c and (2) drivers/xen/blktap/blktap.c in Xen before 3.4.0 for the Linux kernel 2.6.18, and possibly other versions, allows guest OS users to cause a denial of service (infinite loop and CPU consumption) via a large production request index to the blkback or blktap back-end drivers. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42789 - http://www.v
ion. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42789 - http://www.vupen.com/english/advisories/2011/0024 - http://www.redhat.com/support/errata/RHSA-2011-0004.html - http://www.securityfocus.com/bid/45029 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - http://secunia.com/advisories/35093 - https://bugzilla.redhat.com/show_bug.cgi?id=656206 - http://xenbits.xensource.com/linux-2.6.18-xen.hg?rev/77f831cbb91d - http://www.openwall.com/lists/oss-security/2010/11/23/1 - http://xenbits.xensource.com/linux-2.6.18-xen.hg?rev/7070d34f251c - http://www.vmware.com/security/advisories/VMSA-2011-00
tp://xenbits.xensource.com/linux-2.6.18-xen.hg?rev/7070d34f251c - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://www.openwall.com/lists/oss-security/2010/11/24/8
CVE ID: CVE-2010-4248 State: PUBLISHED Published: 2010-11-30T21:19:00 Last Updated: 2024-08-07T03:34:37.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the __exit_signal function in kernel/exit.c in the Linux kernel before 2.6.37-rc2 allows local users to cause a denial of service via vectors related to multithreaded exec, the use of a thread group leader in kernel/posix-cpu-timers.c, and the selection of a new thread group leader in the de_thread function in fs/exec.c. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42789 - http://www.vupen.com/english/advisories/2011/0024 - http://www.redhat.com/support/errata
/secunia.com/advisories/42789 - http://www.vupen.com/english/advisories/2011/0024 - http://www.redhat.com/support/errata/RHSA-2011-0004.html - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.37-rc2 - http://www.redhat.com/support/errata/RHSA-2011-0007.html - http://www.securityfocus.com/bid/45028 - http://www.openwall.com/lists/oss-security/2010/11/24/9 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://secunia.com/advisories/42890 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e0a70217107e6f9844628120412cb27bb4cea194
ttp://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e0a70217107e6f9844628120412cb27bb4cea194 - https://bugzilla.redhat.com/show_bug.cgi?id=656264 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:029 - http://www.openwall.com/lists/oss-security/2010/11/23/2
CVE ID: CVE-2010-4249 State: PUBLISHED Published: 2010-11-29T15:00:00 Last Updated: 2024-08-07T03:34:37.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wait_for_unix_gc function in net/unix/garbage.c in the Linux kernel before 2.6.37-rc3-next-20101125 does not properly select times for garbage collection of inflight sockets, which allows local users to cause a denial of service (system hang) via crafted use of the socketpair and sendmsg system calls for SOCK_SEQPACKET sockets. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42354 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46
a.com/advisories/42354 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - http://www.openwall.com/lists/oss-security/2010/11/24/10 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052513.html - http://www.securityfocus.com/bid/45037 - http://www.redhat.com/support/errata/RHSA-2011-0007.html - http://www.openwall.com/lists/oss-security/2010/11/24/2 - http://lkml.org/lkml/2010/11/23/395 - https://bugzilla.redhat.com/show_bug.cgi?id=656756 - http://www.vupen.com/english/advisories/2010/3321 - http://secunia.com/advisories/42963 - http://lkml.org/lkml/2010/11/25/8 - http://www.vmware.com/security/advisories/VMSA-2011-00
ecunia.com/advisories/42963 - http://lkml.org/lkml/2010/11/25/8 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://marc.info/?l=linux-netdev&m=129059035929046&w=2 - http://secunia.com/advisories/42890 - http://www.redhat.com/support/errata/RHSA-2011-0162.html - http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=9915672d41273f5b77f1b3c29b391ffb7732b84b - http://www.exploit-db.com/exploits/15622/ - http://www.vupen.com/english/advisories/2011/0168 - http://secunia.com/advisories/42745 - http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.37-rc3-next-20101125.bz2 - http://lkml.org/lkml/2010/11/23/450
CVE ID: CVE-2010-4250 State: PUBLISHED Published: 2012-06-21T23:00:00Z Last Updated: 2024-08-07T03:34:37.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the inotify_init1 function in fs/notify/inotify/inotify_user.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service (memory consumption) via vectors involving failed attempts to create files. Additional Analyst Notes: - CVE Program Container: References: - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a2ae4cc9a16e211c8a128ba10d22a85431f093ab - http://www.openwall.com/lists/oss-security/2
lds/linux-2.6.git%3Ba=commit%3Bh=a2ae4cc9a16e211c8a128ba10d22a85431f093ab - http://www.openwall.com/lists/oss-security/2010/11/24/11 - https://github.com/torvalds/linux/commit/a2ae4cc9a16e211c8a128ba10d22a85431f093ab - https://bugzilla.redhat.com/show_bug.cgi?id=656830
CVE ID: CVE-2010-4251 State: PUBLISHED Published: 2011-05-26T16:00:00 Last Updated: 2024-08-07T03:34:37.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: The socket implementation in net/core/sock.c in the Linux kernel before 2.6.34 does not properly manage a backlog of received packets, which allows remote attackers to cause a denial of service (memory consumption) by sending a large amount of network traffic, as demonstrated by netperf UDP tests. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - http://kerneltrap.org/mailarchive/linux-netdev/2010/3/3/6271093/thr
0/0/threaded - http://secunia.com/advisories/46397 - http://kerneltrap.org/mailarchive/linux-netdev/2010/3/3/6271093/thread - http://www.securityfocus.com/bid/46637 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34 - https://bugzilla.redhat.com/show_bug.cgi?id=657303 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8eae939f1400326b06d0c9afe53d2a484a326871
CVE ID: CVE-2010-4252 State: PUBLISHED Published: 2010-12-06T21:00:00 Last Updated: 2024-08-07T03:34:37.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSSL before 1.0.0c, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote attackers to bypass the need for knowledge of the shared secret, and successfully authenticate, by sending crafted values in each round of the protocol. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564 - http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.668471 - https://oval.c
4564 - http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.668471 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19039 - http://www.vupen.com/english/advisories/2010/3120 - http://www.vupen.com/english/advisories/2010/3122 - http://cvs.openssl.org/chngview?cn=20098 - http://secunia.com/advisories/42469 - http://marc.info/?l=bugtraq&m=130497251507577&w=2 - http://www.securityfocus.com/bid/45163 - http://securitytracker.com/id?1024823 - http://marc.info/?l=bugtraq&m=129916880600544&w=2 - http://secunia.com/advisories/57353 - http://openssl.org/news/secadv_20101202.txt - http://marc.info/?l=bugtraq&m=130497251507577
cunia.com/advisories/57353 - http://openssl.org/news/secadv_20101202.txt - http://marc.info/?l=bugtraq&m=130497251507577&w=2 - http://marc.info/?l=bugtraq&m=129916880600544&w=2 - https://github.com/seb-m/jpake - https://bugzilla.redhat.com/show_bug.cgi?id=659297 - http://seb.dbzteam.org/crypto/jpake-session-key-retrieval.pdf
CVE ID: CVE-2010-4253 State: PUBLISHED Published: 2011-01-28T21:13:00 Last Updated: 2024-08-07T03:34:37.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Impress in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file in an ODF or Microsoft Office document, as demonstrated by a PowerPoint (aka PPT) document. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40775 - http://www.securityfocus.com/bid/46031 - https://bugzilla.redhat.com/show_bug.cgi?id=658259 - http://www.debian.org/secur
ttp://www.securityfocus.com/bid/46031 - https://bugzilla.redhat.com/show_bug.cgi?id=658259 - http://www.debian.org/security/2011/dsa-2151 - http://secunia.com/advisories/60799 - http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html - http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml - http://www.openoffice.org/security/cves/CVE-2010-4253.html - http://secunia.com/advisories/43065 - http://www.vupen.com/english/advisories/2011/0230 - http://osvdb.org/70717 - http://www.securitytracker.com/id?1025002 - http://www.vupen.com/english/advisories/2011/0232 - http://www.redhat.com/support/errata/RHSA-2011-0182.html - http://ubuntu.com/usn/usn-1056-1 - http://www.vupen.com/
32 - http://www.redhat.com/support/errata/RHSA-2011-0182.html - http://ubuntu.com/usn/usn-1056-1 - http://www.vupen.com/english/advisories/2011/0279 - http://secunia.com/advisories/43105 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:027 - http://secunia.com/advisories/42999
CVE ID: CVE-2010-4254 State: PUBLISHED Published: 2010-12-03T20:00:00 Last Updated: 2024-08-07T03:34:37.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic methods, which allows remote attackers to bypass generic constraints, and possibly execute arbitrary code, via a crafted method call. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html - http://secunia.com/advisories/42373 - http://www.mono-project.com/Vulnerabilities#Moonlight_Generic_Constraints_Bypass_Vulnerability - h
om/advisories/42373 - http://www.mono-project.com/Vulnerabilities#Moonlight_Generic_Constraints_Bypass_Vulnerability - http://www.exploit-db.com/exploits/15974 - https://bugzilla.novell.com/show_bug.cgi?id=655847 - http://secunia.com/advisories/42877 - https://github.com/mono/mono/commit/4905ef1130feb26c3150b28b97e4a96752e0d399 - https://github.com/mono/mono/commit/cf1ec146f7c6acdc6697032b3aaafc68ffacdcac - http://www.securityfocus.com/bid/45051 - http://www.vupen.com/english/advisories/2011/0076 - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html - https://github.com/mono/mono/commit/65292a69c837b8a5f7a392d34db63de592153358 - https://bugzilla.novell.com/show_bug.cgi
https://github.com/mono/mono/commit/65292a69c837b8a5f7a392d34db63de592153358 - https://bugzilla.novell.com/show_bug.cgi?id=654136
CVE ID: CVE-2010-4255 State: PUBLISHED Published: 2011-01-25T00:00:00 Last Updated: 2024-08-07T03:34:37.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fixup_page_fault function in arch/x86/traps.c in Xen 4.0.1 and earlier on 64-bit platforms, when paravirtualization is enabled, does not verify that kernel mode is used to call the handle_gdt_ldt_mapping_fault function, which allows guest OS users to cause a denial of service (host OS BUG_ON) via a crafted memory access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2011-0017.html - http://secunia.com
ocus.com/archive/1/520102/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2011-0017.html - http://secunia.com/advisories/46397 - https://bugzilla.redhat.com/show_bug.cgi?id=658155 - http://openwall.com/lists/oss-security/2010/11/30/5 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://secunia.com/advisories/42884 - http://lists.xensource.com/archives/html/xen-devel/2010-11/msg01650.html - http://openwall.com/lists/oss-security/2010/11/30/8
CVE ID: CVE-2010-4256 State: PUBLISHED Published: 2011-01-25T18:00:00Z Last Updated: 2024-08-07T03:34:38.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pipe_fcntl function in fs/pipe.c in the Linux kernel before 2.6.37 does not properly determine whether a file is a named pipe, which allows local users to cause a denial of service via an F_SETPIPE_SZ fcntl call. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c66fb347946ebdd5b10908866ecc9fa05ee2cf3d - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37 - http://openwall.com/lists/oss-security/2010/11/30/9 - http://op
/www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37 - http://openwall.com/lists/oss-security/2010/11/30/9 - http://openwall.com/lists/oss-security/2010/11/30/6
CVE ID: CVE-2010-4257 State: PUBLISHED Published: 2010-12-07T01:00:00 Last Updated: 2024-08-07T03:34:37.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the do_trackbacks function in wp-includes/comment.php in WordPress before 3.0.2 allows remote authenticated users to execute arbitrary SQL commands via the Send Trackbacks field. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42844 - http://wordpress.org/news/2010/11/wordpress-3-0-2/ - http://www.debian.org/security/2010/dsa-2138 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052932.html - http://secunia.com/advisories/4275
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052932.html - http://secunia.com/advisories/42753 - http://blog.sjinks.pro/wordpress/858-information-disclosure-via-sql-injection-attack/ - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052892.html - http://secunia.com/advisories/42871 - http://www.vupen.com/english/advisories/2010/3337 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=605603 - http://core.trac.wordpress.org/changeset/16625 - http://www.xakep.ru/magazine/xa/124/052/1.asp - http://www.securityfocus.com/bid/45131 - https://bugzilla.redhat.com/show_bug.cgi?id=659265 - http://lists.fedoraproject.org/pipermail/package-announce/2011-J
- https://bugzilla.redhat.com/show_bug.cgi?id=659265 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052879.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052917.html - http://secunia.com/advisories/42431 - http://codex.wordpress.org/Version_3.0.2 - http://www.vupen.com/english/advisories/2011/0042 - http://www.vupen.com/english/advisories/2011/0057
CVE ID: CVE-2010-4258 State: PUBLISHED Published: 2010-12-30T18:00:00 Last Updated: 2024-08-07T03:34:37.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_exit function in kernel/exit.c in the Linux kernel before 2.6.36.2 does not properly handle a KERNEL_DS get_fs value, which allows local users to bypass intended access_ok restrictions, overwrite arbitrary kernel memory locations, and gain privileges by leveraging a (1) BUG, (2) NULL pointer dereference, or (3) page fault, as demonstrated by vectors involving the clear_child_tid feature and the splice system call. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/201
system call. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2010/12/02/2 - http://secunia.com/advisories/43056 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html - http://secunia.com/advisories/42778 - http://openwall.com/lists/oss-security/2010/12/02/3 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=33dd94ae1ccbfb7bf0fb6c692bc3d1c4269e6177 - http://secunia.com/advisories/42801 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html - http://blog.nelhage.com/2010/12/cve-2010-4258-from-dos-to-privesc/ - http://openwall.com/lists/oss-security/2010/12/09/4 -