Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-1988 State: PUBLISHED Published: 2011-09-15T10:00:00 Last Updated: 2024-08-06T22:46:01.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly parse records in Excel spreadsheets, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Heap Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/s
y." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-072 - http://www.us-cert.gov/cas/techalerts/TA11-256A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12836
CVE ID: CVE-2011-1989 State: PUBLISHED Published: 2011-09-15T10:00:00 Last Updated: 2024-08-06T22:46:00.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010 Gold and SP1; Excel in Office 2010 Gold and SP1; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; Excel Services on Office SharePoint Server 2007 SP2; Excel Services on Office SharePoint Server 2010 Gold and SP1; and Excel Web App 2010 Gold and SP1 do not properly parse conditional expressions associated with formatting require
P1; and Excel Web App 2010 Gold and SP1 do not properly parse conditional expressions associated with formatting requirements, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Conditional Expression Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12974 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-072 - http://www.us-cert.gov/cas/techalerts/TA11-256A.html
CVE ID: CVE-2011-1990 State: PUBLISHED Published: 2011-09-15T10:00:00 Last Updated: 2024-08-06T22:46:00.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel 2007 SP2; Excel in Office 2007 SP2; Excel Viewer SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and Excel Services on Office SharePoint Server 2007 SP2 do not properly validate the sign of an unspecified array index, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Out of Bounds Array Indexing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition
dditional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11982 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-072 - http://www.us-cert.gov/cas/techalerts/TA11-256A.html
CVE ID: CVE-2011-1991 State: PUBLISHED Published: 2011-09-15T10:00:00 Last Updated: 2024-08-06T22:46:00.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple untrusted search path vulnerabilities in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allow local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .doc, .rtf, or .txt file, related to (1) deskpan.dll in the Display Panning CPL Extension, (2) EAPHost Authenticator Service, (3) Folder Redirection, (4) HyperTerminal, (5) the Japanese Input Met
CPL Extension, (2) EAPHost Authenticator Service, (3) Folder Redirection, (4) HyperTerminal, (5) the Japanese Input Method Editor (IME), and (6) Microsoft Management Console (MMC), aka "Windows Components Insecure Library Loading Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-071 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12871 - http://www.us-cert.gov/cas/techalerts/TA11-256A.html
CVE ID: CVE-2011-1992 State: PUBLISHED Published: 2011-12-14T00:00:00 Last Updated: 2024-08-06T22:46:00.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XSS Filter in Microsoft Internet Explorer 8 allows remote attackers to read content from a different (1) domain or (2) zone via a "trial and error" attack, aka "XSS Filter Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA11-347A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14745 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-099
CVE ID: CVE-2011-1993 State: PUBLISHED Published: 2011-10-12T01:00:00 Last Updated: 2024-08-06T22:46:00.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Scroll Event Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-081 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12705
CVE ID: CVE-2011-1994 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-1995 State: PUBLISHED Published: 2011-10-12T01:00:00 Last Updated: 2024-08-06T22:46:00.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that was not properly initialized, aka "OLEAuto32.dll Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-081 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12838
CVE ID: CVE-2011-1996 State: PUBLISHED Published: 2011-10-12T01:00:00 Last Updated: 2024-08-06T22:46:00.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Option Element Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-081 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12896
CVE ID: CVE-2011-1997 State: PUBLISHED Published: 2011-10-12T01:00:00 Last Updated: 2024-08-06T22:46:00.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "OnLoad Event Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-081 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13204
CVE ID: CVE-2011-1998 State: PUBLISHED Published: 2011-10-12T01:00:00 Last Updated: 2024-08-06T22:46:01.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that was not properly initialized, aka "Jscript9.dll Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-081 - http://www.securityfocus.com/bid/49963 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13199
CVE ID: CVE-2011-1999 State: PUBLISHED Published: 2011-10-12T01:00:00 Last Updated: 2024-08-06T22:46:00.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 does not properly allocate and access memory, which allows remote attackers to execute arbitrary code via vectors involving a "dereferenced memory address," aka "Select Element Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-081 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12697 - http://www.securityfocus.com/bid/49964
CVE ID: CVE-2011-20001 State: PUBLISHED Published: 2025-10-14T09:14:53.944Z Last Updated: 2025-10-14T18:57:37.446Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Siemens Products: SIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants), SIMATIC S7-1200 CPU V2 family (incl. SIPLUS variants) Problem Types: CWE-20 Description: A vulnerability has been identified in SIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants) (All versions < V2.0.3), SIMATIC S7-1200 CPU V2 family (incl. SIPLUS variants) (All versions < V2.0.3). The web server interface of affected devices improperly processes incoming malformed HTTP traffic at high rate. This could allow an unauthenticate
f affected devices improperly processes incoming malformed HTTP traffic at high rate. This could allow an unauthenticated remote attacker to force the device entering the stop/defect state, thus creating a denial of service condition. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-625789.html
CVE ID: CVE-2011-20002 State: PUBLISHED Published: 2025-10-14T09:14:55.159Z Last Updated: 2025-10-14T18:58:30.327Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: Siemens Products: SIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants), SIMATIC S7-1200 CPU V2 family (incl. SIPLUS variants) Problem Types: CWE-294 Description: A vulnerability has been identified in SIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants) (All versions < V2.0.2), SIMATIC S7-1200 CPU V2 family (incl. SIPLUS variants) (All versions < V2.0.2). Affected controllers are vulnerable to capture-replay in the communication with the engineering software. This could allow an on-path attacker be
vulnerable to capture-replay in the communication with the engineering software. This could allow an on-path attacker between the engineering software and the controller to execute any previously recorded commands at a later time (e.g. set the controller to STOP), regardless whether or not the controller had a password configured. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-625789.html
CVE ID: CVE-2011-2000 State: PUBLISHED Published: 2011-10-12T01:00:00 Last Updated: 2024-08-06T22:46:00.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Body Element Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-081 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13083
CVE ID: CVE-2011-2001 State: PUBLISHED Published: 2011-10-12T01:00:00 Last Updated: 2024-08-06T22:46:00.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code via an attempted access to a virtual function table after corruption of this table has occurred, aka "Virtual Function Table Corruption Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-081 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.m
security-updates/securitybulletins/2011/ms11-081 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12223 - http://www.securityfocus.com/bid/49966
CVE ID: CVE-2011-2002 State: PUBLISHED Published: 2011-10-12T01:00:00 Last Updated: 2024-08-06T22:46:00.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle TrueType fonts, which allows local users to cause a denial of service (system hang) via a crafted font file, aka "Win32k TrueType Font Type Translation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1026165 - http://www.securityfocus.com/bid/49973 - https://docs.microsoft.com/en-us/security-updates/s
itytracker.com/id?1026165 - http://www.securityfocus.com/bid/49973 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-077 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13024
CVE ID: CVE-2011-2003 State: PUBLISHED Published: 2011-10-12T01:00:00 Last Updated: 2024-08-06T22:46:00.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted .fon file, aka "Font Library File Buffer Overrun Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1026165 - http://securityreason.com/securityalert/8473 - https://docs.microsoft.com/en-us/security
ecuritytracker.com/id?1026165 - http://securityreason.com/securityalert/8473 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-077 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13103
CVE ID: CVE-2011-2004 State: PUBLISHED Published: 2011-11-08T21:00:00 Last Updated: 2024-08-06T22:46:00.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service (reboot) via a crafted TrueType font file, aka "TrueType Font Parsing Vulnerability," a different vulnerability than CVE-2011-3402. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14133 - http://www.kb.cert.org/vuls/id/675073 - https://docs.m
epository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14133 - http://www.kb.cert.org/vuls/id/675073 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-084
CVE ID: CVE-2011-2005 State: PUBLISHED Published: 2011-10-12T01:00:00.000Z Last Updated: 2025-10-22T00:05:49.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13114 - https://docs.microsoft.com/en-us/secur
cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13114 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-080
CVE ID: CVE-2011-2006 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-2007 State: PUBLISHED Published: 2011-10-12T01:00:00 Last Updated: 2024-08-06T22:46:00.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of service (SNA Server service outage) via crafted TCP or UDP traffic, aka "Endless Loop DoS in snabase.exe Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13040 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-082
CVE ID: CVE-2011-2008 State: PUBLISHED Published: 2011-10-12T01:00:00 Last Updated: 2024-08-06T22:46:00.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of service (SNA Server service outage) via crafted TCP or UDP traffic, aka "Access of Unallocated Memory DoS Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12915 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-082
CVE ID: CVE-2011-2009 State: PUBLISHED Published: 2011-10-12T01:00:00 Last Updated: 2024-08-06T22:46:00.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Windows Media Center in Microsoft Windows Vista SP2 and Windows 7 Gold and SP1, and Windows Media Center TV Pack for Windows Vista, allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka "Media Center Insecure Library Loading Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-076 - https://oval.cisecurity.org/repository/search/definition/o
.com/en-us/security-updates/securitybulletins/2011/ms11-076 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12934
CVE ID: CVE-2011-2010 State: PUBLISHED Published: 2011-12-14T00:00:00 Last Updated: 2024-08-06T22:46:00.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Microsoft Office Input Method Editor (IME) for Simplified Chinese in Microsoft Pinyin IME 2010, Office Pinyin SimpleFast Style 2010, and Office Pinyin New Experience Style 2010 does not properly restrict access to configuration options, which allows local users to gain privileges via the Microsoft Pinyin (aka MSPY) IME toolbar, aka "Pinyin IME Elevation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA11-347A.html - https://docs.microsoft.com/en-us/sec
ram Container: References: - http://www.us-cert.gov/cas/techalerts/TA11-347A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-088
CVE ID: CVE-2011-2011 State: PUBLISHED Published: 2011-10-12T01:00:00 Last Updated: 2024-08-06T22:46:00.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, aka "Win32k Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/49981 - http://www.securitytracker.com/id?1026165 - https
gram Container: References: - http://www.securityfocus.com/bid/49981 - http://www.securitytracker.com/id?1026165 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-077 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12904
CVE ID: CVE-2011-2012 State: PUBLISHED Published: 2011-10-12T01:00:00 Last Updated: 2024-08-06T22:46:00.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 does not properly validate session cookies, which allows remote attackers to cause a denial of service (IIS outage) via unspecified network traffic, aka "Null Session Cookie Crash." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/49980 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-079 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitr
urity-updates/securitybulletins/2011/ms11-079 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12799
CVE ID: CVE-2011-2013 State: PUBLISHED Published: 2011-11-08T21:00:00 Last Updated: 2024-10-17T19:27:00.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code by sending a sequence of crafted UDP packets to a closed port, aka "Reference Counter Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-083 - http://www.securitytracker.com/id?1026290 - https:/
crosoft.com/en-us/security-updates/securitybulletins/2011/ms11-083 - http://www.securitytracker.com/id?1026290 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13877
CVE ID: CVE-2011-2014 State: PUBLISHED Published: 2011-11-08T21:00:00 Last Updated: 2024-08-06T22:46:00.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LDAP over SSL (aka LDAPS) implementation in Active Directory, Active Directory Application Mode (ADAM), and Active Directory Lightweight Directory Service (AD LDS) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not examine Certificate Revocation Lists (CRLs), which allows remote authenticated users to bypass intended certificate restrictions and access Active Directory resources by leveraging a revoked X.509 certifica
o bypass intended certificate restrictions and access Active Directory resources by leveraging a revoked X.509 certificate for a domain account, aka "LDAPS Authentication Bypass Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-086 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13278 - http://www.securitytracker.com/id?1026294
CVE ID: CVE-2011-2015 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.