Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-2486 State: PUBLISHED Published: 2012-11-19T11:00:00Z Last Updated: 2024-08-06T23:00:34.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: nspluginwrapper before 1.4.4 does not properly provide access to NPNVprivateModeBool variable settings, which could prevent Firefox plugins from determining if they should run in Private Browsing mode and allow remote attackers to bypass intended access restrictions, as demonstrated using Flash. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.novell.com/show_bug.cgi?id=702034 - https://github.com/davidben/nspluginwrapper/commit/7e4ab8e1189846041f955e6c83f72bc1624e7a98 - http://rhn.redhat.com/
4 - https://github.com/davidben/nspluginwrapper/commit/7e4ab8e1189846041f955e6c83f72bc1624e7a98 - http://rhn.redhat.com/errata/RHSA-2012-1459.html - http://www.securitytracker.com/id?1027757 - http://lwn.net/Alerts/524725/ - https://bugzilla.redhat.com/show_bug.cgi?id=715384
CVE ID: CVE-2011-2487 State: PUBLISHED Published: 2020-03-11T15:45:46 Last Updated: 2024-08-06T23:00:33.988Z Vendors: Apache, Red Hat Products: WSS4J, JBossWS Problem Types: Other Description: The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a Bleichenbacher attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=713539 - https://www.nds.ruhr-uni-bochum.de/research/publications/breaking-xml-encryption-pkcs15/ - http://cxf.apache.org/note-on-cve-2011-2487.html - http://rhn.redhat.com/errata/RHSA-2013-0191.html - http://rhn.redhat.com/errata/RHSA-2
.org/note-on-cve-2011-2487.html - http://rhn.redhat.com/errata/RHSA-2013-0191.html - http://rhn.redhat.com/errata/RHSA-2013-0192.html - http://rhn.redhat.com/errata/RHSA-2013-0193.html - http://rhn.redhat.com/errata/RHSA-2013-0194.html - http://rhn.redhat.com/errata/RHSA-2013-0195.html - http://rhn.redhat.com/errata/RHSA-2013-0196.html - http://rhn.redhat.com/errata/RHSA-2013-0198.html - http://rhn.redhat.com/errata/RHSA-2013-0221.html - http://www.securityfocus.com/bid/57549 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81737 - https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thr
/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E
CVE ID: CVE-2011-2488 State: PUBLISHED Published: 2011-07-27T20:00:00Z Last Updated: 2024-09-16T23:15:30.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Joomla! before 1.5.23 does not properly check for errors, which allows remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.joomla.org/announcements/release-news/5367-joomla-1523-released.html - http://www.openwall.com/lists/oss-security/2011/06/20/17 - http://www.osvdb.org/71587 - http://secunia.com/advisories/44028 - http://www.openwall.com/lists/oss-security/2011/06/23/4 - http://developer.joomla.org/security/news/9-security/10
4028 - http://www.openwall.com/lists/oss-security/2011/06/23/4 - http://developer.joomla.org/security/news/9-security/10-core-security/340-20110401-core-information-disclosure.html
CVE ID: CVE-2011-2489 State: PUBLISHED Published: 2011-07-27T01:29:00 Last Updated: 2024-08-06T23:00:34.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple off-by-one errors in opiesu.c in opiesu in OPIE 2.4.1-test1 and earlier might allow local users to gain privileges via a crafted command line. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/23/5 - http://www.openwall.com/lists/oss-security/2011/06/22/6 - https://hermes.opensuse.org/messages/10082052 - https://bugzilla.novell.com/show_bug.cgi?id=698772 - https://bugzillafiles.novell.org/attachment.cgi?id=435902 - http://www.debian.org/security/2011/ds
w_bug.cgi?id=698772 - https://bugzillafiles.novell.org/attachment.cgi?id=435902 - http://www.debian.org/security/2011/dsa-2281 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631344 - https://hermes.opensuse.org/messages/10082068 - http://www.securityfocus.com/bid/48390 - http://secunia.com/advisories/45448 - http://secunia.com/advisories/45136
CVE ID: CVE-2011-2490 State: PUBLISHED Published: 2011-07-27T01:29:00 Last Updated: 2024-08-06T23:00:34.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already be running its maximum number of processes. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/23/5 - http://www.openwall.com/lists/oss-security/2011/06/22/6 - https://hermes.opensuse.org/messages/10082052 - https://bugzilla.novell.com/show_bug.cgi?id=698772 - http://
1/06/22/6 - https://hermes.opensuse.org/messages/10082052 - https://bugzilla.novell.com/show_bug.cgi?id=698772 - http://www.debian.org/security/2011/dsa-2281 - http://secunia.com/advisories/39966 - https://hermes.opensuse.org/messages/10082068 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631345 - http://www.securityfocus.com/bid/48390 - https://bugzillafiles.novell.org/attachment.cgi?id=435901 - http://secunia.com/advisories/45448 - http://secunia.com/advisories/45136
CVE ID: CVE-2011-2491 State: PUBLISHED Published: 2013-03-01T11:00:00 Last Updated: 2024-08-06T23:00:34.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Network Lock Manager (NLM) protocol implementation in the NFS client functionality in the Linux kernel before 3.0 allows local users to cause a denial of service (system hang) via a LOCK_UN flock system call. Additional Analyst Notes: - CVE Program Container: References: - http://ftp.osuosl.org/pub/linux/kernel/v3.0/ChangeLog-3.0 - https://github.com/torvalds/linux/commit/0b760113a3a155269a3fba93a409c640031dd68f - http://rhn.redhat.com/errata/RHSA-2011-1212.html - http://www.openwall.com/lists/oss-security/2011/06/23/6 - h
31dd68f - http://rhn.redhat.com/errata/RHSA-2011-1212.html - http://www.openwall.com/lists/oss-security/2011/06/23/6 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0b760113a3a155269a3fba93a409c640031dd68f - https://bugzilla.redhat.com/show_bug.cgi?id=709393
CVE ID: CVE-2011-2492 State: PUBLISHED Published: 2011-07-28T22:00:00 Last Updated: 2024-08-06T23:00:34.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bluetooth subsystem in the Linux kernel before 3.0-rc4 does not properly initialize certain data structures, which allows local users to obtain potentially sensitive information from kernel memory via a crafted getsockopt system call, related to (1) the l2cap_sock_getsockopt_old function in net/bluetooth/l2cap_sock.c and (2) the rfcomm_sock_getsockopt_old function in net/bluetooth/rfcomm/sock.c. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2011-0927.html - http://git.ke
l Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2011-0927.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8d03e971cf403305217b8e62db3a2e5ad2d6263f - https://bugzilla.redhat.com/show_bug.cgi?id=703019 - http://www.kernel.org/pub/linux/kernel/v3.0/testing/ChangeLog-3.0-rc4 - http://www.openwall.com/lists/oss-security/2011/06/24/3 - http://securitytracker.com/id?1025778 - http://www.openwall.com/lists/oss-security/2011/06/24/2 - http://permalink.gmane.org/gmane.linux.bluez.kernel/12909 - http://marc.info/?l=bugtraq&m=139447903326211&w=2
CVE ID: CVE-2011-2493 State: PUBLISHED Published: 2012-06-13T10:00:00Z Last Updated: 2024-08-06T23:00:33.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ext4_fill_super function in fs/ext4/super.c in the Linux kernel before 2.6.39 does not properly initialize a certain error-report data structure, which allows local users to cause a denial of service (OOPS) by attempting to mount a crafted ext4 filesystem. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/0449641130f5652b344ef6fa39fa019d7e94660a - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0449641130f5652b344ef6fa39fa019d7e94660a
ttp://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0449641130f5652b344ef6fa39fa019d7e94660a - http://www.openwall.com/lists/oss-security/2011/06/24/4 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39
CVE ID: CVE-2011-2494 State: PUBLISHED Published: 2012-06-13T10:00:00 Last Updated: 2024-08-06T23:00:34.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: kernel/taskstats.c in the Linux kernel before 3.1 allows local users to obtain sensitive I/O statistics by sending taskstats commands to a netlink socket, as demonstrated by discovering the length of another user's password. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/1 - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html - http://secunia.com/advisories/48898 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=
00021.html - http://secunia.com/advisories/48898 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1a51410abe7d0ee4b1d112780f46df87d3621043 - https://github.com/torvalds/linux/commit/1a51410abe7d0ee4b1d112780f46df87d3621043 - https://bugzilla.redhat.com/show_bug.cgi?id=716842 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1
CVE ID: CVE-2011-2495 State: PUBLISHED Published: 2012-06-13T10:00:00 Last Updated: 2024-08-06T23:00:34.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: fs/proc/base.c in the Linux kernel before 2.6.39.4 does not properly restrict access to /proc/#####/io files, which allows local users to obtain sensitive I/O statistics by polling a file, as demonstrated by discovering the length of another user's password. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/1 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39.4 - https://github.com/torvalds/linux/commit/1d1221f375c94ef961ba8574ac4f85c8870ddd51 - h
x/kernel/v2.6/ChangeLog-2.6.39.4 - https://github.com/torvalds/linux/commit/1d1221f375c94ef961ba8574ac4f85c8870ddd51 - http://rhn.redhat.com/errata/RHSA-2011-1212.html - https://bugzilla.redhat.com/show_bug.cgi?id=716825 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1d1221f375c94ef961ba8574ac4f85c8870ddd51
CVE ID: CVE-2011-2496 State: PUBLISHED Published: 2012-06-13T10:00:00Z Last Updated: 2024-08-06T23:00:34.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the vma_to_resize function in mm/mremap.c in the Linux kernel before 2.6.39 allows local users to cause a denial of service (BUG_ON and system crash) via a crafted mremap system call that expands a memory mapping. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=716538 - https://github.com/torvalds/linux/commit/982134ba62618c2d69fbbbd166d0a11ee3b7e3d8 - http://www.openwall.com/lists/oss-security/2011/06/27/2 - http://git.kernel.org/?p=linux/kernel
fbbbd166d0a11ee3b7e3d8 - http://www.openwall.com/lists/oss-security/2011/06/27/2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=982134ba62618c2d69fbbbd166d0a11ee3b7e3d8 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39
CVE ID: CVE-2011-2497 State: PUBLISHED Published: 2011-08-29T18:00:00 Last Updated: 2024-08-06T23:00:34.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in the l2cap_config_req function in net/bluetooth/l2cap_core.c in the Linux kernel before 3.0 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a small command-size value within the command header of a Logical Link Control and Adaptation Protocol (L2CAP) configuration request, leading to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3B
nalyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7ac28817536797fd40e9646452183606f9e17f71 - http://www.kernel.org/pub/linux/kernel/v3.0/ChangeLog-3.0 - http://www.openwall.com/lists/oss-security/2011/06/24/9 - http://marc.info/?l=linux-kernel&m=130891911909436&w=2 - http://www.securityfocus.com/bid/48472 - http://www.osvdb.org/74679 - http://securityreason.com/securityalert/8359 - http://www.openwall.com/lists/oss-security/2011/06/27/3 - https://bugzilla.redhat.com/show_bug.cgi?id=716805
CVE ID: CVE-2011-2498 State: PUBLISHED Published: 2020-02-20T03:59:37 Last Updated: 2024-08-06T23:00:33.903Z Vendors: n/a Products: Linux kernel Problem Types: Other Description: The Linux kernel from v2.3.36 before v2.6.39 allows local unprivileged users to cause a denial of service (memory consumption) by triggering creation of PTE pages. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=oss-security&m=130923704824984&w=2 - https://www.rapid7.com/db/vulnerabilities/ubuntu-USN-1383-1 - https://security-tracker.debian.org/tracker/CVE-2011-2498 - https://usn.ubuntu.com/1167-1/ - https://people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-2498.html
CVE ID: CVE-2011-2499 State: PUBLISHED Published: 2020-02-12T19:09:15 Last Updated: 2024-08-06T23:00:33.973Z Vendors: Mambo Products: CMS Problem Types: XSS Description: Mambo CMS through 4.6.5 has multiple XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2011/06/28/15
CVE ID: CVE-2011-2500 State: PUBLISHED Published: 2014-02-15T11:00:00 Last Updated: 2024-08-06T23:00:34.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: The host_reliable_addrinfo function in support/export/hostname.c in nfs-utils before 1.2.4 does not properly use DNS to verify access to NFS exports, which allows remote attackers to mount filesystems by establishing crafted DNS A and PTR records. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=716949 - http://sourceforge.net/projects/nfs/files/nfs-utils/1.2.4/Changelog-nfs-utils-1.2.4/download - http://marc.info/?l=linux-nfs&m=130875695821953&w=2 - http://rhn.redhat
utils/1.2.4/Changelog-nfs-utils-1.2.4/download - http://marc.info/?l=linux-nfs&m=130875695821953&w=2 - http://rhn.redhat.com/errata/RHSA-2011-1534.html - http://sourceforge.net/projects/nfs/files/nfs-utils/1.2.4/
CVE ID: CVE-2011-2501 State: PUBLISHED Published: 2011-07-17T20:00:00 Last Updated: 2024-08-06T23:00:34.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: The png_format_buffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service (application crash) via a crafted PNG image that triggers an out-of-bounds read during the copying of error-message data. NOTE: this vulnerability exists because of a CVE-2004-0421 regression. NOTE: this is called an off-by-one error by some sources. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advi
f-by-one error by some sources. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49660 - http://secunia.com/advisories/45046 - http://www.ubuntu.com/usn/USN-1175-1 - http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=commit%3Bh=65e6d5a34f49acdb362a0625a706c6b914e670af - http://www.mandriva.com/security/advisories?name=MDVSA-2011:151 - http://www.securityfocus.com/bid/48474 - https://bugzilla.redhat.com/show_bug.cgi?id=717084 - http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.617466 - http://security.gentoo.org/glsa/glsa-201206-15.xml - http://www.openwall.com/lists/oss-security/2011/06/27
rity.617466 - http://security.gentoo.org/glsa/glsa-201206-15.xml - http://www.openwall.com/lists/oss-security/2011/06/27/13 - http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062720.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/68517 - http://secunia.com/advisories/45289 - http://lists.fedoraproject.org/pipermail/package-announce/2011-July/063118.html - http://www.debian.org/security/2011/dsa-2287 - http://sourceforge.net/mailarchive/forum.php?thread_name=BANLkTikrnU6FJNQYFvwmt78hwpgKPVRd1Q%40mail.gmail.com&forum_name=png-mng-implement - http://secunia.com/advisories/45405 - http://www.redhat.com/support/errata/RHSA-2011-1105.html - http://www.openwall.com/li
p://secunia.com/advisories/45405 - http://www.redhat.com/support/errata/RHSA-2011-1105.html - http://www.openwall.com/lists/oss-security/2011/06/28/16 - http://secunia.com/advisories/45460 - http://secunia.com/advisories/45486 - http://secunia.com/advisories/45492 - http://secunia.com/advisories/45415
CVE ID: CVE-2011-2502 State: PUBLISHED Published: 2012-07-26T19:00:00Z Last Updated: 2024-09-16T20:42:11.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate modules when a module path is specified by a user for user-space probing, which allows local users in the stapusr group to gain privileges via a crafted module in the search path in the -u argument. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=716476 - http://sources.redhat.com/git/gitweb.cgi?p=systemtap.git%3Ba=commitdiff%3Bh=4ecaadf545a729b
com/show_bug.cgi?id=716476 - http://sources.redhat.com/git/gitweb.cgi?p=systemtap.git%3Ba=commitdiff%3Bh=4ecaadf545a729bb3e5f01f6f019716d49815d9a - http://secunia.com/advisories/45377 - http://sources.redhat.com/git/gitweb.cgi?p=systemtap.git%3Ba=blob%3Bf=NEWS%3Bhb=304d73b1fea24af791f2a129fb141c5009eae6a8
CVE ID: CVE-2011-2503 State: PUBLISHED Published: 2012-07-26T19:00:00Z Last Updated: 2024-09-17T01:01:54.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: The insert_module function in runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate a module when loading it, which allows local users to gain privileges via a race condition between the signature validation and the module initialization. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2503 - http://sources.redhat.com/git/gitweb.cgi?p=systemtap.git%3Ba=commitdiff%3Bh=ed51cfa24ca27746ab09b5
gi?id=CVE-2011-2503 - http://sources.redhat.com/git/gitweb.cgi?p=systemtap.git%3Ba=commitdiff%3Bh=ed51cfa24ca27746ab09b59280b94117dd58cba3 - http://www.debian.org/security/2011/dsa-2348 - http://secunia.com/advisories/46920 - http://secunia.com/advisories/45377 - http://sources.redhat.com/git/gitweb.cgi?p=systemtap.git%3Ba=blob%3Bf=NEWS%3Bhb=304d73b1fea24af791f2a129fb141c5009eae6a8
CVE ID: CVE-2011-2504 State: PUBLISHED Published: 2013-03-08T22:00:00 Last Updated: 2024-08-06T23:00:34.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in x11perfcomp in XFree86 x11perf before 1.5.4 allows local users to gain privileges via unspecified Trojan horse code in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-0502.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/82241 - http://lists.freedesktop.org/archives/xorg-announce/2011-July/001715.html - http://www.securityfocus.com/bid/58082 - https://bugzilla.redhat.com/show_bug.cgi?id=71767
ounce/2011-July/001715.html - http://www.securityfocus.com/bid/58082 - https://bugzilla.redhat.com/show_bug.cgi?id=717672
CVE ID: CVE-2011-2505 State: PUBLISHED Published: 2011-07-14T23:00:00 Last Updated: 2024-08-06T23:00:34.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: libraries/auth/swekey/swekey.auth.lib.php in the Swekey authentication feature in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 assigns values to arbitrary parameters referenced in the query string, which allows remote attackers to modify the SESSION superglobal array via a crafted request, related to a "remote variable manipulation vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.xxor.se/advisories/phpMyAdmin_3.x_Multiple_Remote_Code_Executions.txt - http://www.openwall.com
References: - http://www.xxor.se/advisories/phpMyAdmin_3.x_Multiple_Remote_Code_Executions.txt - http://www.openwall.com/lists/oss-security/2011/06/28/2 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2011-008/ - http://secunia.com/advisories/45292 - http://www.openwall.com/lists/oss-security/2011/06/28/6 - http://www.openwall.com/lists/oss-security/2011/06/28/8 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:124 - http://securityreason.com/securityalert/8306 - http://www.phpmyadmin.net/home_page/security/PMASA-2011-5.php - http://secunia.com/advisories/45139 - http://www.osvdb.org/73611 - http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmi
isories/45139 - http://www.osvdb.org/73611 - http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=7ebd958b2bf59f96fecd5b3322bdbd0b244a7967 - http://www.exploit-db.com/exploits/17514/ - http://www.debian.org/security/2011/dsa-2286 - http://www.securityfocus.com/archive/1/518804/100/0/threaded - http://www.openwall.com/lists/oss-security/2011/06/29/11 - http://ha.xxor.se/2011/07/phpmyadmin-3x-multiple-remote-code.html - http://secunia.com/advisories/45315 - http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062719.html
CVE ID: CVE-2011-2506 State: PUBLISHED Published: 2011-07-14T23:00:00 Last Updated: 2024-08-06T23:00:34.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: setup/lib/ConfigGenerator.class.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 does not properly restrict the presence of comment closing delimiters, which allows remote attackers to conduct static code injection attacks by leveraging the ability to modify the SESSION superglobal array. Additional Analyst Notes: - CVE Program Container: References: - http://www.xxor.se/advisories/phpMyAdmin_3.x_Multiple_Remote_Code_Executions.txt - http://www.openwall.com/lists/oss-security/2011/06/28/2 - http://typo3.org/teams
x_Multiple_Remote_Code_Executions.txt - http://www.openwall.com/lists/oss-security/2011/06/28/2 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2011-008/ - http://www.phpmyadmin.net/home_page/security/PMASA-2011-6.php - http://secunia.com/advisories/45292 - http://www.openwall.com/lists/oss-security/2011/06/28/6 - http://www.openwall.com/lists/oss-security/2011/06/28/8 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:124 - http://securityreason.com/securityalert/8306 - http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=0fbedaf5fd7a771d0885c6b7385d934fc90d0d7f - http://secunia.com/advisories/45139 - http://www.exploit-db.com/