Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-3324 State: PUBLISHED Published: 2011-10-10T10:00:00 Last Updated: 2024-08-06T23:29:56.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ospf6_lsa_is_changed function in ospf6_lsa.c in the OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via trailing zero values in the Link State Advertisement (LSA) header list of an IPv6 Database Description message. Additional Analyst Notes: - CVE Program Container: References: - http://www.quagga.net/download/quagga-0.99.19.changelog.txt - http://www.kb.cert.org/vuls/id/668534 - http://code.quagga.net/?p=quagga.git%3Ba=commit
d/quagga-0.99.19.changelog.txt - http://www.kb.cert.org/vuls/id/668534 - http://code.quagga.net/?p=quagga.git%3Ba=commit%3Bh=09395e2a0e93b2cf4258cb1de91887948796bb68 - http://www.debian.org/security/2011/dsa-2316 - http://rhn.redhat.com/errata/RHSA-2012-1259.html - https://www.cert.fi/en/reports/2011/vulnerability539178.html - http://secunia.com/advisories/46139 - http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00027.html - http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00007.html - http://security.gentoo.org/glsa/glsa-201202-02.xml - http://rhn.redhat.com/errata/RHSA-2012-1258.html - http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.html
/rhn.redhat.com/errata/RHSA-2012-1258.html - http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.html - http://secunia.com/advisories/46274 - http://secunia.com/advisories/48106 - http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00010.html
CVE ID: CVE-2011-3325 State: PUBLISHED Published: 2011-10-10T10:00:00 Last Updated: 2024-08-06T23:29:56.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: ospf_packet.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via (1) a 0x0a type field in an IPv4 packet header or (2) a truncated IPv4 Hello packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.quagga.net/download/quagga-0.99.19.changelog.txt - http://code.quagga.net/?p=quagga.git%3Ba=commit%3Bh=61ab0301606053192f45c188bc48afc837518770 - http://www.kb.cert.org/vuls/id/668534 - http://www.debian.org/security/2011/dsa-2316 - http://rhn.redhat.
afc837518770 - http://www.kb.cert.org/vuls/id/668534 - http://www.debian.org/security/2011/dsa-2316 - http://rhn.redhat.com/errata/RHSA-2012-1259.html - http://code.quagga.net/?p=quagga.git%3Ba=commit%3Bh=717750433839762d23a5f8d88fe0b4d57c8d490a - https://www.cert.fi/en/reports/2011/vulnerability539178.html - http://secunia.com/advisories/46139 - http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00027.html - http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00007.html - http://security.gentoo.org/glsa/glsa-201202-02.xml - http://rhn.redhat.com/errata/RHSA-2012-1258.html - http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.html - http://secunia.c
rata/RHSA-2012-1258.html - http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.html - http://secunia.com/advisories/46274 - http://secunia.com/advisories/48106 - http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00010.html - https://bugzilla.redhat.com/show_bug.cgi?id=738396
CVE ID: CVE-2011-3326 State: PUBLISHED Published: 2011-10-10T10:00:00 Last Updated: 2024-08-06T23:29:56.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ospf_flood function in ospf_flood.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via an invalid Link State Advertisement (LSA) type in an IPv4 Link State Update message. Additional Analyst Notes: - CVE Program Container: References: - http://www.quagga.net/download/quagga-0.99.19.changelog.txt - http://www.kb.cert.org/vuls/id/668534 - http://www.debian.org/security/2011/dsa-2316 - http://rhn.redhat.com/errata/RHSA-2012-1259.html - https://www.cert.fi/en/reports/2011/
ian.org/security/2011/dsa-2316 - http://rhn.redhat.com/errata/RHSA-2012-1259.html - https://www.cert.fi/en/reports/2011/vulnerability539178.html - http://secunia.com/advisories/46139 - http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00027.html - http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00007.html - http://security.gentoo.org/glsa/glsa-201202-02.xml - http://rhn.redhat.com/errata/RHSA-2012-1258.html - http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.html - http://secunia.com/advisories/46274 - http://secunia.com/advisories/48106 - http://code.quagga.net/?p=quagga.git%3Ba=commit%3Bh=6b161fc12a15aba8824c84d1eb38e529aaf70769 - http://li
isories/48106 - http://code.quagga.net/?p=quagga.git%3Ba=commit%3Bh=6b161fc12a15aba8824c84d1eb38e529aaf70769 - http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00010.html
CVE ID: CVE-2011-3327 State: PUBLISHED Published: 2011-10-10T10:00:00 Last Updated: 2024-08-06T23:29:56.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the ecommunity_ecom2str function in bgp_ecommunity.c in bgpd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code by sending a crafted BGP UPDATE message over IPv4. Additional Analyst Notes: - CVE Program Container: References: - http://www.quagga.net/download/quagga-0.99.19.changelog.txt - http://www.kb.cert.org/vuls/id/668534 - http://www.debian.org/security/2011/dsa-2316 - http://rhn.redhat.com/errata/RHSA-2012-1259.html
ert.org/vuls/id/668534 - http://www.debian.org/security/2011/dsa-2316 - http://rhn.redhat.com/errata/RHSA-2012-1259.html - https://www.cert.fi/en/reports/2011/vulnerability539178.html - http://secunia.com/advisories/46139 - http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00027.html - http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00007.html - http://code.quagga.net/?p=quagga.git%3Ba=commit%3Bh=94431dbc753171b48b5c6806af97fd690813b00a - http://security.gentoo.org/glsa/glsa-201202-02.xml - http://rhn.redhat.com/errata/RHSA-2012-1258.html - http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.html - http://secunia.com/advisories/46274 - http://s
p://lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.html - http://secunia.com/advisories/46274 - http://secunia.com/advisories/48106 - https://bugzilla.redhat.com/show_bug.cgi?id=738400 - http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00010.html
CVE ID: CVE-2011-3328 State: PUBLISHED Published: 2012-01-17T19:00:00 Last Updated: 2024-08-06T23:29:56.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: The png_handle_cHRM function in pngrutil.c in libpng 1.5.4, when color-correction support is enabled, allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a malformed PNG image containing a cHRM chunk associated with a certain zero value. Additional Analyst Notes: - CVE Program Container: References: - http://libpng.org/pub/png/libpng.html - http://sourceforge.net/tracker/index.php?func=detail&aid=3406145&group_id=5624&atid=105624 - http://lists.apple.com/archives/security-annou
net/tracker/index.php?func=detail&aid=3406145&group_id=5624&atid=105624 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - http://support.apple.com/kb/HT5130 - http://www.kb.cert.org/vuls/id/477046 - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html - https://bugzilla.redhat.com/show_bug.cgi?id=740864 - http://support.apple.com/kb/HT5281 - http://lists.apple.com/archives/security-announce/2012/May/msg00001.html
CVE ID: CVE-2011-3330 State: PUBLISHED Published: 2011-11-04T21:00:00 Last Updated: 2024-08-06T23:29:56.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the UnitelWay Windows Device Driver, as used in Schneider Electric Unity Pro 6 and earlier, OPC Factory Server 3.34, Vijeo Citect 7.20 and earlier, Telemecanique Driver Pack 2.6 and earlier, Monitor Pro 7.6 and earlier, and PL7 Pro 4.5 and earlier, allows local users, and possibly remote attackers, to execute arbitrary code via an unspecified system parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/70882 - http://www.securityfocus
E Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/70882 - http://www.securityfocus.com/bid/50319 - http://www.us-cert.gov/control_systems/pdf/ICSA-11-277-01.pdf - http://www.scada.schneider-electric.com/sites/scada/en/login/vijeo-citect-unitelway-windows-device-driver.page - http://secunia.com/advisories/46534 - http://www.securitytracker.com/id?1026234
CVE ID: CVE-2011-3332 State: PUBLISHED Published: 2011-10-06T23:00:00 Last Updated: 2024-08-06T23:29:56.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Iceni Argus 6.20 and earlier and Infix 5.04 allows remote attackers to execute arbitrary code via a crafted PDF document that uses flate compression. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/70343 - http://secunia.com/advisories/46320 - http://www.kb.cert.org/vuls/id/225833 - http://www.securityfocus.com/bid/49959 - http://osvdb.org/76096
CVE ID: CVE-2011-3336 State: PUBLISHED Published: 2020-02-12T19:32:03 Last Updated: 2024-08-06T23:29:56.681Z Vendors: Apple Products: macOS Problem Types: denial of service Description: regcomp in the BSD implementation of libc is vulnerable to denial of service due to stack exhaustion. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Mar/166 - http://www.securityfocus.com/bid/50541 - https://www.securityfocus.com/archive/1/520390 - https://cxsecurity.com/issue/WLB-2011110082
CVE ID: CVE-2011-3337 State: PUBLISHED Published: 2012-01-04T02:00:00Z Last Updated: 2024-09-16T22:14:04.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: eEye Audit ID 2499 in eEye Digital Security Audits 2406 through 2423 for eEye Retina Network Security Scanner on HP-UX, IRIX, and Solaris allows local users to gain privileges via a Trojan horse gauntlet program in an arbitrary directory under /usr/local/. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/448051 - http://www.eeye.com/Resources/Security-Center/Research/Security-Advisories/AL20111108
CVE ID: CVE-2011-3339 State: PUBLISHED Published: 2011-12-17T02:00:00 Last Updated: 2024-08-06T23:29:56.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Admin Control Center in Sentinel HASP Run-time Environment 5.95 and earlier in SafeNet Sentinel HASP (formerly Aladdin HASP SRM) run-time installer before 6.x and SDK before 5.11, as used in 7 Technologies (7T) IGSS 7 and other products, when Firefox 2.0 is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors that trigger write access to a configuration file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.
write access to a configuration file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71789 - http://www.us-cert.gov/control_systems/pdf/ICSA-11-314-01.pdf - http://www.safenet-inc.com/support-downloads/sentinel-drivers/CVE-2011-3339/ - http://www.securityfocus.com/bid/51028
CVE ID: CVE-2011-3340 State: PUBLISHED Published: 2011-10-21T10:00:00 Last Updated: 2024-08-06T23:29:56.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ATCOM Netvolution 2.5.8 ASP allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/519984/100/0/threaded - http://census-labs.com/news/2011/10/03/netvolution-referer-SQLi/ - http://secunia.com/advisories/46255
CVE ID: CVE-2011-3341 State: PUBLISHED Published: 2011-09-08T18:00:00 Last Updated: 2024-08-06T23:29:56.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple off-by-one errors in order_cmd.cpp in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted CMD_INSERT_ORDER command. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066128.html - http://secunia.com/advisories/46075 - http://bugs.openttd.org/task/4745 - http://security.openttd.org/en/CVE-2011-3341 - http://www.debian.org/security/2012/dsa-2386 - ht
openttd.org/task/4745 - http://security.openttd.org/en/CVE-2011-3341 - http://www.debian.org/security/2012/dsa-2386 - http://openwall.com/lists/oss-security/2011/09/02/4 - http://bugs.openttd.org/task/4745/getfile/7707/fixcmds.diff - http://www.securityfocus.com/bid/49439 - http://openwall.com/lists/oss-security/2011/09/06/2
CVE ID: CVE-2011-3342 State: PUBLISHED Published: 2011-09-08T18:00:00 Last Updated: 2024-08-06T23:29:56.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors related to (1) NAME, (2) PLYR, (3) CHTS, or (4) AIPL (aka AI config) chunk loading from a savegame. Additional Analyst Notes: - CVE Program Container: References: - http://security.openttd.org/en/CVE-2011-3342 - http://bugs.openttd.org/task/4748 - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066128.html - http://bugs.openttd.org/task/4717
http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066128.html - http://bugs.openttd.org/task/4717 - http://secunia.com/advisories/46075 - http://www.debian.org/security/2012/dsa-2386 - http://openwall.com/lists/oss-security/2011/09/02/4 - http://www.securityfocus.com/bid/49439 - http://openwall.com/lists/oss-security/2011/09/06/2
CVE ID: CVE-2011-3343 State: PUBLISHED Published: 2011-09-08T18:00:00 Last Updated: 2024-08-06T23:29:56.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in OpenTTD before 1.1.3 allow local users to cause a denial of service (daemon crash) or possibly gain privileges via (1) a crafted BMP file with RLE compression or (2) crafted dimensions in a BMP file. Additional Analyst Notes: - CVE Program Container: References: - http://security.openttd.org/en/CVE-2011-3343 - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066128.html - http://secunia.com/advisories/46075 - http://www.debian.org/security/2012/dsa-2386 - http://bugs.openttd
r/066128.html - http://secunia.com/advisories/46075 - http://www.debian.org/security/2012/dsa-2386 - http://bugs.openttd.org/task/4746 - http://openwall.com/lists/oss-security/2011/09/02/4 - http://bugs.openttd.org/task/4747 - http://www.securityfocus.com/bid/49439 - http://openwall.com/lists/oss-security/2011/09/06/2
CVE ID: CVE-2011-3344 State: PUBLISHED Published: 2014-02-05T18:00:00 Last Updated: 2024-08-06T23:29:56.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Lookup Login/Password form in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allows remote attackers to inject arbitrary web script or HTML via the URI. Additional Analyst Notes: - CVE Program Container: References: - https://git.fedorahosted.org/cgit/spacewalk.git/commit/?id=890781d7ec983e32fe83af2f7c033d087292851f - https://bugzilla.redhat.com/show_bug.cgi?id=731647 - https://www.redhat.com/archives/spacewalk-announce-list/2011-December/msg00000.html - http://www.re
_bug.cgi?id=731647 - https://www.redhat.com/archives/spacewalk-announce-list/2011-December/msg00000.html - http://www.redhat.com/support/errata/RHSA-2011-1299.html
CVE ID: CVE-2011-3345 State: PUBLISHED Published: 2011-09-17T10:00:00 Last Updated: 2024-08-06T23:29:56.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: ulp/sdp/sdp_proc.c in the ib_sdp module (aka ib_sdp.ko) in the ofa_kernel package in the InfiniBand driver implementation in OpenFabrics Enterprise Distribution (OFED) before 1.5.3 does not properly handle certain non-array variables, which allows local users to cause a denial of service (stack memory corruption and system crash) by reading the /proc/net/sdpstats file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45861 - http://www.openwall.com/lists/oss-security/2011/09/07/1 -
Container: References: - http://secunia.com/advisories/45861 - http://www.openwall.com/lists/oss-security/2011/09/07/1 - http://www.openwall.com/lists/oss-security/2011/09/07/3 - http://www.securityfocus.com/bid/49486 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69631 - http://git.openfabrics.org/git?p=ofed_1_5/linux-2.6.git%3Ba=commit%3Bh=04bb801a31825d1559c4670253e1bea1291a1af8 - http://www.openwall.com/lists/oss-security/2011/09/06/3
CVE ID: CVE-2011-3346 State: PUBLISHED Published: 2014-04-01T01:00:00 Last Updated: 2024-08-06T23:29:56.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in hw/scsi-disk.c in the SCSI subsystem in QEMU before 0.15.2, as used by Xen, might allow local guest users with permission to access the CD-ROM to cause a denial of service (guest crash) via a crafted SAI READ CAPACITY SCSI command. NOTE: this is only a vulnerability when root has manually modified certain permissions or ACLs. Additional Analyst Notes: - CVE Program Container: References: - http://git.qemu.org/?p=qemu-stable-0.15.git%3Ba=log - http://www.redhat.com/support/errata/RHSA-2011-1401.html - https:/
http://git.qemu.org/?p=qemu-stable-0.15.git%3Ba=log - http://www.redhat.com/support/errata/RHSA-2011-1401.html - https://github.com/bonzini/qemu/commit/103b40f51e4012b3b0ad20f615562a1806d7f49a - http://www.openwall.com/lists/oss-security/2011/10/20/2 - https://bugzilla.redhat.com/show_bug.cgi?id=736038 - https://github.com/bonzini/qemu/commit/7285477ab11831b1cf56e45878a89170dd06d9b9
CVE ID: CVE-2011-3347 State: PUBLISHED Published: 2013-06-08T10:00:00Z Last Updated: 2024-08-06T23:29:56.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain Red Hat patch to the be2net implementation in the kernel package before 2.6.32-218.el6 on Red Hat Enterprise Linux (RHEL) 6, when promiscuous mode is enabled, allows remote attackers to cause a denial of service (system crash) via non-member VLAN packets. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=736425 - https://oss.oracle.com/git/?p=redpatch.git%3Ba=commit%3Bh=fadca7bdc43b02f518585d9547019966415cadfd
CVE ID: CVE-2011-3348 State: PUBLISHED Published: 2011-09-19T15:00:00 Last Updated: 2024-08-06T23:29:56.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mod_proxy_ajp module in the Apache HTTP Server before 2.2.21, when used with mod_proxy_balancer in certain configurations, allows remote attackers to cause a denial of service (temporary "error state" in the backend server) via a malformed HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=131731002122529&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69804 - http://support.apple.com/kb/HT5130 - http://www.redhat.com/support/errata/RHSA-2011-1391.html -
vulnerabilities/69804 - http://support.apple.com/kb/HT5130 - http://www.redhat.com/support/errata/RHSA-2011-1391.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14941 - http://rhn.redhat.com/errata/RHSA-2012-0543.html - http://marc.info/?l=bugtraq&m=132033751509019&w=2 - http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:168 - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html - http://community.jboss.org/message/625307 - http://www.securityfocus.com/bid/49616 - http://rhn.redhat.com/errata/RHSA-2012-0542.html - http://www.apache.org/dist/h
http://www.securityfocus.com/bid/49616 - http://rhn.redhat.com/errata/RHSA-2012-0542.html - http://www.apache.org/dist/httpd/Announcement2.2.html - http://marc.info/?l=bugtraq&m=131731002122529&w=2 - http://httpd.apache.org/security/vulnerabilities_22.html#2.2.21 - http://www.securitytracker.com/id?1026054 - http://marc.info/?l=bugtraq&m=132033751509019&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18154 - http://secunia.com/advisories/46013 - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f74
3ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread
r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r688df6f16f141e966a0a47f817e559312b3da27886f59116a94b273d%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re2e23465bbdb17ffe109d21b4f192e6b58221cd7aa8797d530b4cd75%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r1d201e3da31a2c8aa870c8314623caef7debd74a13d0f25205e26f15%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.htt
che.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2011-3349 State: PUBLISHED Published: 2019-11-19T21:42:43 Last Updated: 2024-08-06T23:29:56.826Z Vendors: lightdm Products: lightdm Problem Types: Other Description: lightdm before 0.9.6 writes in .dmrc and Xauthority files using root permissions while the files are in user controlled folders. A local user can overwrite root-owned files via a symlink, which can allow possible privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-3349 - https://access.redhat.com/security/cve/cve-2011-3349 - https://www.securityfocus.com/bid/50506 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=639151 - https:
-2011-3349 - https://www.securityfocus.com/bid/50506 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=639151 - https://bugs.launchpad.net/debian/+source/lightdm/+bug/834079 - https://seclists.org/oss-sec/2011/q3/393
CVE ID: CVE-2011-3350 State: PUBLISHED Published: 2019-11-19T22:16:23 Last Updated: 2024-08-06T23:29:56.815Z Vendors: masqmail Products: masqmail Problem Types: Other Description: masqmail 0.2.21 through 0.2.30 improperly calls seteuid() in src/log.c and src/masqmail.c that results in improper privilege dropping. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-3350 - https://access.redhat.com/security/cve/cve-2011-3350 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=638002