Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-4157 State: PUBLISHED Published: 2011-11-16T16:00:00 Last Updated: 2024-08-07T00:01:51.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in hydra.exe in HP SAN/iQ before 9.5 on the HP StorageWorks P4000 Virtual SAN Appliance allows remote attackers to execute arbitrary code via a crafted login request. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-11-111/ - http://www.securityfocus.com/bid/47005 - http://www.securityfocus.com/bid/51042 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03082086 - http://h20000.www2.hp.com/bizsupport/TechSupport/
0.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03082086 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03082086 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71766
CVE ID: CVE-2011-4158 State: PUBLISHED Published: 2011-11-16T16:00:00 Last Updated: 2024-08-07T00:01:51.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Directories Support for ProLiant Management Processors 3.10 and 3.20 for Integrated Lights-Out iLO2 and iLO3 allows remote authenticated users to obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/520484/100/0/threaded - http://www.securityfocus.com/archive/1/520484/100/0/threaded - http://securityreason.com/securityalert/8531
CVE ID: CVE-2011-4159 State: PUBLISHED Published: 2011-11-19T02:00:00 Last Updated: 2024-08-07T00:01:50.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in System Administration Manager (SAM) in EMS before A.04.20.11.04_01 on HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03089106 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14353 - http://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c030891
l%3Aorg.mitre.oval%3Adef%3A14353 - http://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03089106
CVE ID: CVE-2011-4160 State: PUBLISHED Published: 2011-11-24T02:00:00 Last Updated: 2024-08-07T00:01:51.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Operations Agent 11.00 and Performance Agent 4.73 and 5.0 on AIX, HP-UX, Linux, and Solaris allows local users to bypass intended directory-access restrictions via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=132198248000785&w=2 - http://marc.info/?l=bugtraq&m=132198248000785&w=2 - http://secunia.com/advisories/46971 - http://www.securityfocus.com/bid/50761
CVE ID: CVE-2011-4161 State: PUBLISHED Published: 2011-12-01T21:00:00 Last Updated: 2024-08-07T00:01:50.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx, 4xxx, 5550, 9500, CMxxxx, CPxxxx, and Enterprise CPxxxx; Digital Sender 9200c and 9250c; LaserJet 4xxx, 5200, 90xx, Mxxxx, and Pxxxx; and LaserJet Enterprise 500 color M551, 600, M4555 MFP, and P3015 enables the Remote Firmware Update (RFU) setting, which allows remote attackers to execute arbitrary code by using a session on TCP port 9100 to upload a crafted firmware update. Additional Analyst Notes: - CVE Program Container: References: -
n on TCP port 9100 to upload a crafted firmware update. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/717921 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03102449 - http://isc.sans.org/diary/Hacking+HP+Printers+for+Fun+and+Profit/12112 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03102449 - http://redtape.msnbc.msn.com/_news/2011/11/29/9076395-exclusive-millions-of-printers-open-to-devastating-hack-attack-researchers-say - http://secunia.com/advisories/47063 - http://www.securitytracker.com/id?1026357 - http://www.securityfocus.com/bid/51324 - https://lists.immunityinc.com/pipermail/da
www.securitytracker.com/id?1026357 - http://www.securityfocus.com/bid/51324 - https://lists.immunityinc.com/pipermail/dailydave/2011-November/000378.html
CVE ID: CVE-2011-4162 State: PUBLISHED Published: 2011-12-05T11:00:00 Last Updated: 2024-08-07T00:01:50.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) AddUser, (2) AddUserEx, (3) RemoveUser, (4) RemoveUserByGuide, (5) RemoveUserEx, and (6) RemoveUserRegardless methods in HP Protect Tools Device Access Manager (PTDAM) before 6.1.0.1 allow remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a long SidString argument. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=134152032516062&w=2 - http://marc.info/?l=bugtraq&m=132284686204608&w=2 - https://www.htbridge.ch/advisory/heap_
gtraq&m=134152032516062&w=2 - http://marc.info/?l=bugtraq&m=132284686204608&w=2 - https://www.htbridge.ch/advisory/heap_memory_corruption_in_hp_device_access_manager_for_protect_tools_information_store.html - http://marc.info/?l=bugtraq&m=132284686204608&w=2 - http://marc.info/?l=bugtraq&m=134152032516062&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71600
CVE ID: CVE-2011-4163 State: PUBLISHED Published: 2011-12-29T19:00:00 Last Updated: 2024-08-07T00:01:51.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Database Archiving Software 6.31 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1213. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=132517846332173&w=2 - http://marc.info/?l=bugtraq&m=132517846332173&w=2 - http://www.securityfocus.com/bid/51205
CVE ID: CVE-2011-4164 State: PUBLISHED Published: 2011-12-29T19:00:00 Last Updated: 2024-08-07T00:01:51.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Database Archiving Software 6.31 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1214. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=132517846332173&w=2 - http://marc.info/?l=bugtraq&m=132517846332173&w=2 - http://www.securityfocus.com/bid/51205
CVE ID: CVE-2011-4165 State: PUBLISHED Published: 2011-12-29T19:00:00 Last Updated: 2024-08-07T00:01:50.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Database Archiving Software 6.31 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1263. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=132517846332173&w=2 - http://marc.info/?l=bugtraq&m=132517846332173&w=2 - http://www.securityfocus.com/bid/51205
CVE ID: CVE-2011-4166 State: PUBLISHED Published: 2011-12-27T02:00:00Z Last Updated: 2024-09-16T19:09:24.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the MPAUploader.Uploader.1.UploadFiles method in HP Managed Printing Administration before 2.6.4 allows remote attackers to create arbitrary files via crafted form data. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-11-352/ - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03128469 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03128469
CVE ID: CVE-2011-4167 State: PUBLISHED Published: 2011-12-27T02:00:00Z Last Updated: 2024-09-16T18:43:56.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in MPAUploader.dll in HP Managed Printing Administration before 2.6.4 allows remote attackers to execute arbitrary code via a long filename parameter in an uploadfile action to Default.asp. Additional Analyst Notes: - CVE Program Container: References: - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03128469 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03128469 - http://www.zerodayinitiative.com/advisories/ZDI-11-353/
CVE ID: CVE-2011-4168 State: PUBLISHED Published: 2011-12-27T02:00:00Z Last Updated: 2024-09-16T20:13:17.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in hpmpa/jobDelivery/Default.asp in HP Managed Printing Administration before 2.6.4 allows remote attackers to create arbitrary files via crafted form data. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-11-354/ - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03128469 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03128469
CVE ID: CVE-2011-4169 State: PUBLISHED Published: 2011-12-27T02:00:00Z Last Updated: 2024-09-16T20:22:11.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Managed Printing Administration before 2.6.4 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03128469 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03128469
CVE ID: CVE-2011-4170 State: PUBLISHED Published: 2011-10-23T10:00:00Z Last Updated: 2024-09-16T20:41:49.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the theme_adium_append_message function in empathy-theme-adium.c in the Adium theme in libempathy-gtk in Empathy 3.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted alias (aka nickname) in a /me event, a different vulnerability than CVE-2011-3635. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.gnome.org/show_bug.cgi?id=662035
CVE ID: CVE-2011-4171 State: PUBLISHED Published: 2011-10-24T18:00:00 Last Updated: 2024-08-07T00:01:51.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in content/error.jsp in IBM WebSphere ILOG Rule Team Server 7.1.1 allows remote attackers to inject arbitrary web script or HTML via the project parameter to teamserver/faces/home.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/50056 - http://secunia.com/advisories/46350 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70461 - http://www.ibm.com/support/docview.wss?uid=swg1RS00803 - http://www.osvdb.org/76238 - http://security
rabilities/70461 - http://www.ibm.com/support/docview.wss?uid=swg1RS00803 - http://www.osvdb.org/76238 - http://securitytracker.com/id?1026170
CVE ID: CVE-2011-4172 State: PUBLISHED Published: 2011-10-24T18:00:00Z Last Updated: 2024-09-17T00:57:01.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in KENT-WEB WEB FORUM before 5.1 allow remote attackers to inject arbitrary web script or HTML via (1) an e-mail address field or (2) a cookie, a related issue to CVE-2011-3383, CVE-2011-3983, and CVE-2011-3984. Additional Analyst Notes: - CVE Program Container: References: - http://www.kent-web.com/bbs/wforum.html
CVE ID: CVE-2011-4173 State: PUBLISHED Published: 2011-10-24T18:00:00Z Last Updated: 2024-09-16T19:25:53.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Simple Machines Forum (SMF) 2.x before 2.0.1 allows remote attackers to hijack the authentication of administrators or moderators via vectors involving image files, a different vulnerability than CVE-2011-3615. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/46386 - http://openwall.com/lists/oss-security/2011/10/10/6 - http://openwall.com/lists/oss-security/20
a.com/advisories/46386 - http://openwall.com/lists/oss-security/2011/10/10/6 - http://openwall.com/lists/oss-security/2011/10/09/3 - http://www.simplemachines.org/community/index.php?topic=452888.0
CVE ID: CVE-2011-4181 State: PUBLISHED Published: 2018-06-11T15:00:00Z Last Updated: 2024-09-17T02:21:47.163Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: SUSE Products: open build service Problem Types: CWE-284 Description: A vulnerability in open build service allows remote attackers to gain access to source files even though source access is disabled. Affected releases are SUSE open build service up to and including version 2.1.15 (for 2.1) and before version 2.3. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openSUSE/open-build-service/commit/5281e4bff9df31f1f91e22a0d1e9086b93b23d7e - https://bugzilla.suse.com/sho
//github.com/openSUSE/open-build-service/commit/5281e4bff9df31f1f91e22a0d1e9086b93b23d7e - https://bugzilla.suse.com/show_bug.cgi?id=734003
CVE ID: CVE-2011-4182 State: PUBLISHED Published: 2018-06-12T15:00:00Z Last Updated: 2024-09-17T02:57:38.708Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: SUSE Linux Enterprise Products: sysconfig Problem Types: CWE-77 Description: Missing escaping of ESSID values in sysconfig of SUSE Linux Enterprise allows attackers controlling an access point to cause execute arbitrary code. Affected releases are sysconfig prior to 0.83.7-2.1. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=735394 - https://www.suse.com/security/cve/CVE-2017-15710/
CVE ID: CVE-2011-4183 State: PUBLISHED Published: 2018-06-13T13:00:00Z Last Updated: 2024-09-17T00:11:18.418Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: SUSE Products: open build service Problem Types: CWE-862 Description: A vulnerability in open build service allows remote attackers to upload arbitrary RPM files. Affected releases are SUSE open build service prior to 2.1.16. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openSUSE/open-build-service/commit/5281e4bff9df31f1f91e22a0d1e9086b93b23d7e - https://bugzilla.suse.com/show_bug.cgi?id=736243
CVE ID: CVE-2011-4185 State: PUBLISHED Published: 2012-02-20T21:00:00Z Last Updated: 2024-09-16T23:51:50.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GetPrinterURLList2 method in the ActiveX control in Novell iPrint Client before 5.78 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2008-2431 and CVE-2008-2436. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/viewContent.do?externalId=7010144 - http://www.novell.com/support/viewContent.do?externalId=7008708
CVE ID: CVE-2011-4186 State: PUBLISHED Published: 2012-02-20T21:00:00Z Last Updated: 2024-09-17T00:46:13.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.78 on Windows allows remote attackers to execute arbitrary code via a crafted client-file-name parameter in a printer-url, a different vulnerability than CVE-2011-1705. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/viewContent.do?externalId=7008708 - http://www.novell.com/support/viewContent.do?externalId=7010145
CVE ID: CVE-2011-4187 State: PUBLISHED Published: 2012-02-20T21:00:00Z Last Updated: 2024-09-16T18:08:04.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the GetDriverSettings function in nipplib.dll in Novell iPrint Client before 5.78 on Windows allows remote attackers to execute arbitrary code via a long realm field, a different vulnerability than CVE-2011-3173. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/viewContent.do?externalId=7010143 - http://www.novell.com/support/viewContent.do?externalId=7008708
CVE ID: CVE-2011-4188 State: PUBLISHED Published: 2012-04-09T20:00:00 Last Updated: 2024-08-07T00:01:51.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Create Attribute function in jclient in Novell iManager 2.7.4 before patch 4 allows remote authenticated users to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted EnteredAttrName parameter, a related issue to CVE-2010-1929. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1026894 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74669 - http://www.novell.com/support/viewContent.do?externalId=700297
ps://exchange.xforce.ibmcloud.com/vulnerabilities/74669 - http://www.novell.com/support/viewContent.do?externalId=7002971 - http://secunia.com/advisories/48672
CVE ID: CVE-2011-4189 State: PUBLISHED Published: 2012-03-02T22:00:00 Last Updated: 2024-08-07T00:01:51.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: The client in Novell GroupWise 8.0x through 8.02HP3 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via a long e-mail address in an Address Book (aka .NAB) file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/79720 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73588 - https://bugzilla.novell.com/show_bug.cgi?id=733885 - http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=37&Itemid=
ll.com/show_bug.cgi?id=733885 - http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=37&Itemid=37 - http://www.securityfocus.com/bid/52233 - http://www.novell.com/support/viewContent.do?externalId=7010205 - http://secunia.com/advisories/48199 - http://www.securitytracker.com/id?1026753
CVE ID: CVE-2011-4190 State: PUBLISHED Published: 2018-06-08T17:00:00Z Last Updated: 2024-09-17T00:26:16.217Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: SUSE Products: kdump Problem Types: CWE-306 Description: The kdump implementation is missing the host key verification in the kdump and mkdumprd OpenSSH integration of kdump prior to version 2012-01-20. This is similar to CVE-2011-3588, but different in that the kdump implementation is specific to SUSE. A remote malicious kdump server could use this flaw to impersonate the correct kdump server to obtain security sensitive information (kdump core files). Additional Analyst Notes: - CVE Program Container:
p server to obtain security sensitive information (kdump core files). Additional Analyst Notes: - CVE Program Container: References: - https://www.suse.com/security/cve/CVE-2011-4190/ - https://bugzilla.suse.com/show_bug.cgi?id=722440
CVE ID: CVE-2011-4191 State: PUBLISHED Published: 2011-11-30T02:00:00Z Last Updated: 2024-09-17T03:53:41.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the xdrDecodeString function in XNFS.NLM in Novell NetWare 6.5 SP8 allows remote attackers to execute arbitrary code or cause a denial of service (abend or NFS outage) via long packets. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.novell.com/show_bug.cgi?id=671020 - https://bugzilla.novell.com/show_bug.cgi?id=702491 - http://download.novell.com/Download?buildid=Cfw1tDezgbw~
CVE ID: CVE-2011-4192 State: PUBLISHED Published: 2014-04-16T18:00:00 Last Updated: 2024-08-07T00:01:51.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: kiwi before 4.85.1, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to execute arbitrary commands as demonstrated by "double quotes in kiwi_oemtitle of .profile." Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00015.html
CVE ID: CVE-2011-4193 State: PUBLISHED Published: 2014-04-16T18:00:00 Last Updated: 2024-08-07T00:01:50.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the overlay files tab in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted application, related to cloning. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00015.html
CVE ID: CVE-2011-4194 State: PUBLISHED Published: 2012-02-02T02:00:00Z Last Updated: 2024-09-16T18:14:32.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Novell iPrint Server in Novell Open Enterprise Server 2 (OES2) through SP3 on Linux allows remote attackers to execute arbitrary code via a crafted attributes-natural-language field. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/viewContent.do?externalId=7010084
CVE ID: CVE-2011-4195 State: PUBLISHED Published: 2014-04-16T18:00:00 Last Updated: 2024-08-07T00:01:51.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: kiwi before 4.98.05, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to execute arbitrary commands via shell metacharacters in an image name. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/11/02/4 - https://github.com/openSUSE/kiwi/commit/88bf491d16942766016c606e4210b4e072c1019f - http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00015.html
CVE ID: CVE-2011-4197 State: PUBLISHED Published: 2012-01-03T19:00:00 Last Updated: 2024-08-07T00:01:51.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: etc/inc/certs.inc in the PKI implementation in pfSense before 2.0.1 creates each X.509 certificate with a true value for the CA basic constraint, which allows remote attackers to create sub-certificates for arbitrary subjects by leveraging the private key. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51169 - https://github.com/bsdperimeter/pfsense/commit/87b4deb2b2dae9013e6aa0fe490d6a5a04a27894 - https://github.com/bsdperimeter/pfsense/commit/1379d66f11aaf72982a70287b83e24ef
b4deb2b2dae9013e6aa0fe490d6a5a04a27894 - https://github.com/bsdperimeter/pfsense/commit/1379d66f11aaf72982a70287b83e24efcd18898e - http://archives.neohapsis.com/archives/bugtraq/2011-12/0152.html - https://www.trustmatta.com/advisories/MATTA-2011-001.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/71969 - http://www.osvdb.org/77982 - http://secunia.com/advisories/46780
CVE ID: CVE-2011-4201 State: PUBLISHED Published: 2011-12-13T11:00:00Z Last Updated: 2024-09-16T19:00:36.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: remote_support.cgi in the Tadasoft Restorepoint 3.2 evaluation image allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) pid1 or (2) pid2 parameter in a stop_remote_support action. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustmatta.com/advisories/MATTA-2011-003.txt
CVE ID: CVE-2011-4202 State: PUBLISHED Published: 2011-12-13T11:00:00Z Last Updated: 2024-09-16T20:51:37.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Tadasoft Restorepoint 3.2 evaluation image uses weak permissions (www write access) for unspecified scripts, which allows local users to gain privileges by modifying a script file. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustmatta.com/advisories/MATTA-2011-003.txt