Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-6098 State: PUBLISHED Published: 2013-01-27T22:00:00Z Last Updated: 2024-08-06T21:28:38.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: grade/edit/outcome/edit_form.php in Moodle 1.9.x through 1.9.19, 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 does not properly enforce the moodle/grade:manage capability requirement, which allows remote authenticated users to convert custom outcomes into standard site-wide outcomes by leveraging the teacher role and using the re-editing feature. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=220158 - http://git.moodle.org/gw?p
s: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=220158 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-27619 - http://openwall.com/lists/oss-security/2013/01/21/1
CVE ID: CVE-2012-6099 State: PUBLISHED Published: 2013-01-27T22:00:00Z Last Updated: 2024-09-17T02:52:28.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: The moodle1 backup converter in backup/converter/moodle1/lib.php in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 does not properly validate pathnames, which allows remote authenticated users to read arbitrary files by leveraging the backup-restoration feature. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-36977 - https://moodle.org/mod/forum/discuss.php?d=220160 - http://openwall.com/lists/oss
=search&h=HEAD&st=commit&s=MDL-36977 - https://moodle.org/mod/forum/discuss.php?d=220160 - http://openwall.com/lists/oss-security/2013/01/21/1
CVE ID: CVE-2012-6100 State: PUBLISHED Published: 2013-01-27T22:00:00Z Last Updated: 2024-08-06T21:28:38.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: report/outline/index.php in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 does not properly enforce the moodle/user:viewhiddendetails capability requirement, which allows remote authenticated users to discover a hidden lastaccess value by reading an activity report. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=220161 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-33340 - http://openwall.com/lists/oss-security/2013/0
p://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-33340 - http://openwall.com/lists/oss-security/2013/01/21/1
CVE ID: CVE-2012-6101 State: PUBLISHED Published: 2013-01-27T22:00:00Z Last Updated: 2024-09-16T17:07:43.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple open redirect vulnerabilities in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors related to (1) backup/backupfilesedit.php, (2) comment/comment_post.php, (3) course/switchrole.php, (4) mod/wiki/filesedit.php, (5) tag/coursetags_add.php, or (6) user/files.php. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-
yst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-35991 - https://moodle.org/mod/forum/discuss.php?d=220162 - http://openwall.com/lists/oss-security/2013/01/21/1
CVE ID: CVE-2012-6102 State: PUBLISHED Published: 2013-01-27T22:00:00Z Last Updated: 2024-09-17T03:49:23.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib.php in the Submission comments plugin in the Assignment module in Moodle 2.3.x before 2.3.4 and 2.4.x before 2.4.1 allows remote attackers to read or modify the submission comments (aka feedback comments) of arbitrary users via a crafted URI. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-37244 - http://openwall.com/lists/oss-security/2013/01/21/1 - https://moodle.org/mod/forum/discuss.php?d=220163
CVE ID: CVE-2012-6103 State: PUBLISHED Published: 2013-01-27T22:00:00Z Last Updated: 2024-09-17T04:04:56.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in user/messageselect.php in the messaging system in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 allow remote attackers to hijack the authentication of arbitrary users for requests that send course messages. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-36600 - https://moodle.org/mod/forum/discuss.php?d=220164 - http://openwall.com/lists/oss-security/2013
&st=commit&s=MDL-36600 - https://moodle.org/mod/forum/discuss.php?d=220164 - http://openwall.com/lists/oss-security/2013/01/21/1
CVE ID: CVE-2012-6104 State: PUBLISHED Published: 2013-01-27T22:00:00Z Last Updated: 2024-09-17T00:36:35.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: blog/rsslib.php in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 allows remote attackers to obtain sensitive information from site-level blogs by leveraging the guest role and reading an RSS feed. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-36620 - http://openwall.com/lists/oss-security/2013/01/21/1 - https://moodle.org/mod/forum/discuss.php?d=220165
CVE ID: CVE-2012-6105 State: PUBLISHED Published: 2013-01-27T22:00:00Z Last Updated: 2024-09-16T23:56:25.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: blog/rsslib.php in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 continues to provide a blog RSS feed after blogging is disabled, which allows remote attackers to obtain sensitive information by reading this feed. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=220166 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-37467 - http://openwall.com/lists/oss-security/2013/01/21/1
CVE ID: CVE-2012-6106 State: PUBLISHED Published: 2013-01-27T22:00:00Z Last Updated: 2024-09-16T16:27:37.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: calendar/managesubscriptions.php in the Manage Subscriptions implementation in Moodle 2.4.x before 2.4.1 omits a capability check, which allows remote authenticated users to remove course-level calendar subscriptions by leveraging the student role and sending an iCalendar object. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-37106 - https://moodle.org/mod/forum/discuss.php?d=220167 - http://openwall.com/lists/oss-security/2013/01/21/1
CVE ID: CVE-2012-6107 State: PUBLISHED Published: 2014-09-29T22:00:00 Last Updated: 2024-08-06T21:28:38.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Axis2/C does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - https://issues.apache.org/jira/browse/AXIS2C-1619 - http://mail-archives.apache.org/mod_mbox/axis-c-dev/201301.mbox/browser - http://www.securityfocus.com/bid/57267 - https://bugzilla.redhat.com/show_bug.cgi
_mbox/axis-c-dev/201301.mbox/browser - http://www.securityfocus.com/bid/57267 - https://bugzilla.redhat.com/show_bug.cgi?id=894372 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81211 - https://lists.apache.org/thread.html/0e30b2b72099a995f6e91342b03d3e4b477677d0ea77e3ce55b53614%40%3Cc-dev.axis.apache.org%3E - https://lists.apache.org/thread.html/06e82460243af2ec9cc5a9af0a718943bc53c804b0a786ac61d518e4%40%3Cc-dev.axis.apache.org%3E - https://lists.apache.org/thread.html/rfaf85467328c125126e2607196a7fb9510a9f9513dadf6d954b4af0c%40%3Cc-dev.axis.apache.org%3E - https://lists.apache.org/thread.html/r469d2a5b453c95fc8335f581422a5e7ae4d31f10d22650fb85abfc2d%40%3Cc-dev.axis.apache.org%3E
CVE ID: CVE-2012-6108 State: PUBLISHED Published: 2014-02-15T11:00:00 Last Updated: 2024-08-06T21:28:39.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP Linux Imaging and Printing (HPLIP) before 3.13.2 uses world-writable permissions for /var/log/hp and /var/log/hp/tmp, which allows local users to delete log files via standard filesystem operations. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=894283 - https://bugs.launchpad.net/hplip/+bug/1016507/comments/6 - http://sourceforge.net/projects/hplip/files/hplip/3.13.2/hplip-3.13.2.tar.gz/download - https://bugs.launchpad.net/hplip/+bug/1016507/comments/1
CVE ID: CVE-2012-6109 State: PUBLISHED Published: 2013-03-01T02:00:00Z Last Updated: 2024-08-06T21:28:39.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/rack/multipart.rb in Rack before 1.1.4, 1.2.x before 1.2.6, 1.3.x before 1.3.7, and 1.4.x before 1.4.2 uses an incorrect regular expression, which allows remote attackers to cause a denial of service (infinite loop) via a crafted Content-Disposion header. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=895277 - https://github.com/rack/rack/commit/c9f65df37a151821eb88ddd1dc404b83e52c52d5 - http://rack.github.com/ - https://github.com/rack/rack/blob/master/README.
it/c9f65df37a151821eb88ddd1dc404b83e52c52d5 - http://rack.github.com/ - https://github.com/rack/rack/blob/master/README.rdoc - https://groups.google.com/forum/#%21msg/rack-devel/1w4_fWEgTdI/XAkSNHjtdTsJ - http://rhn.redhat.com/errata/RHSA-2013-0548.html - http://rhn.redhat.com/errata/RHSA-2013-0544.html
CVE ID: CVE-2012-6110 State: PUBLISHED Published: 2014-09-29T22:00:00 Last Updated: 2024-08-06T21:28:38.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: bcron-exec in bcron before 0.10 does not close file descriptors associated with temporary files when running a cron job, which allows local users to modify job files and send spam messages by accessing an open file descriptor. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=686650 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81383 - http://seclists.org/oss-sec/2013/q1/102 - http://untroubled.org/bcron/NEWS
CVE ID: CVE-2012-6111 State: PUBLISHED Published: 2019-12-20T14:25:51 Last Updated: 2024-08-06T21:28:39.450Z Vendors: gnome-keyring Products: gnome-keyring Problem Types: does not discard stored secrets in some cases Description: gnome-keyring does not discard stored secrets when using gnome_keyring_lock_all_sync function Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-6111 - http://www.openwall.com/lists/oss-security/2013/01/17/4 - https://access.redhat.com/security/cve/cve-2012-6111 - https://bugzilla.gnome.org/show_bug.cgi?id=690466
CVE ID: CVE-2012-6112 State: PUBLISHED Published: 2013-01-27T22:00:00Z Last Updated: 2024-08-06T21:28:38.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: classes/GoogleSpell.php in the PHP Spellchecker (aka Google Spellchecker) addon before 2.0.6.1 for TinyMCE, as used in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 and other products, does not properly handle control characters, which allows remote attackers to trigger arbitrary outbound HTTP requests via a crafted string. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tinymce/tinymce_spellchecker_php/commit/22910187bfb9edae90c26e10100d8145b505
Container: References: - https://github.com/tinymce/tinymce_spellchecker_php/commit/22910187bfb9edae90c26e10100d8145b505b974 - http://www.tinymce.com/forum/viewtopic.php?id=30036 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-37283 - http://www.tinymce.com/develop/changelog/?type=phpspell - http://openwall.com/lists/oss-security/2013/01/21/1 - https://moodle.org/mod/forum/discuss.php?d=220157
CVE ID: CVE-2012-6113 State: PUBLISHED Published: 2013-01-19T21:00:00 Last Updated: 2024-08-06T21:28:38.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: The openssl_encrypt function in ext/openssl/openssl.c in PHP 5.3.9 through 5.3.13 does not initialize a certain variable, which allows remote attackers to obtain sensitive information from process memory by providing zero bytes of input data. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2013/01/18/6 - https://bugs.php.net/bug.php?id=61413 - http://www.ubuntu.com/usn/USN-1702-1 - https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1099793 - http://git.php.net/?p=php-src
.ubuntu.com/usn/USN-1702-1 - https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1099793 - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=270a406ac94b5fc5cc9ef59fc61e3b4b95648a3e
CVE ID: CVE-2012-6114 State: PUBLISHED Published: 2020-01-28T14:38:36 Last Updated: 2024-08-06T21:28:39.424Z Vendors: git-extras Products: git-extras Problem Types: Symbolic Link Following Description: The git-changelog utility in git-extras 1.7.0 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/changelog or (2) /tmp/.git-effort. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/01/22/8 - http://www.openwall.com/lists/oss-security/2013/01/23/5 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=698490
CVE ID: CVE-2012-6115 State: PUBLISHED Published: 2013-03-12T22:00:00 Last Updated: 2024-08-06T21:28:38.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: The domain management tool (rhevm-manage-domains) in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and earlier, when the validate action is enabled, logs the administrative password to a world-readable log file, which allows local users to obtain sensitive information by reading this file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=893355 - http://rhn.redhat.com/errata/RHSA-2013-0211.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/81833 - ht
355 - http://rhn.redhat.com/errata/RHSA-2013-0211.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/81833 - http://www.securitytracker.com/id/1028076 - http://gerrit.ovirt.org/gitweb?p=ovirt-engine.git%3Ba=commit%3Bh=e8c72daec4efa8be0fcd8ea55c41e855ddd8eedf - http://www.securityfocus.com/bid/57749
CVE ID: CVE-2012-6116 State: PUBLISHED Published: 2013-03-01T02:00:00 Last Updated: 2024-08-06T21:28:39.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: modules/certs/manifests/config.pp in katello-configure before 1.3.3.pulpv2 in Katello uses weak permissions (666) for the Candlepin bootstrap RPM, which allows local users to modify the Candlepin CA certificate by writing to this file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Katello/katello/commits/master/katello-configure/katello-configure.spec - http://secunia.com/advisories/52774 - https://github.com/jsomara/katello/commit/65f1e42b7bda0f3410931c50598540d944d8bf0d - http://rhn.redh
/advisories/52774 - https://github.com/jsomara/katello/commit/65f1e42b7bda0f3410931c50598540d944d8bf0d - http://rhn.redhat.com/errata/RHSA-2013-0547.html - http://rhn.redhat.com/errata/RHSA-2013-0686.html
CVE ID: CVE-2012-6117 State: PUBLISHED Published: 2013-03-12T21:00:00Z Last Updated: 2024-09-16T19:36:22.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aeolus Configuration Server, as used in Red Hat CloudForms Cloud Engine before 1.1.2, uses world-readable permissions for /var/log/aeolus-configserver/configserver.log, which allows local users to read plaintext passwords by reading the log file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=875294 - http://rhn.redhat.com/errata/RHSA-2013-0545.html
CVE ID: CVE-2012-6118 State: PUBLISHED Published: 2013-03-12T21:00:00Z Last Updated: 2024-08-06T21:28:38.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Administer tab in Aeolus Conductor allows remote authenticated users to bypass intended quota restrictions by updating the Maximum Running Instances quota user setting. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=906192 - http://rhn.redhat.com/errata/RHSA-2013-0545.html
CVE ID: CVE-2012-6119 State: PUBLISHED Published: 2013-04-02T22:00:00Z Last Updated: 2024-08-06T21:28:38.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatures, which allows local users to modify manifests. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/52774 - http://www.osvdb.org/91719 - https://bugzilla.redhat.com/show_bug.cgi?id=908613 - https://github.com/candlepin/candlepin/blob/master/candlepin.spec - http://rhn.redhat.com/errata/RHSA-2013-0686.html - https://github.com/candlepin/candlepin/commit/f4d93
/candlepin.spec - http://rhn.redhat.com/errata/RHSA-2013-0686.html - https://github.com/candlepin/candlepin/commit/f4d93230e58b969c506b4c9778e04482a059b08c
CVE ID: CVE-2012-6120 State: PUBLISHED Published: 2013-04-10T15:00:00Z Last Updated: 2024-08-06T21:28:38.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat OpenStack Essex and Folsom creates the /var/log/puppet directory with world-readable permissions, which allows local users to obtain sensitive information such as Puppet log files. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-0710.html
CVE ID: CVE-2012-6121 State: PUBLISHED Published: 2013-02-24T21:00:00 Last Updated: 2024-08-06T21:28:39.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 0.8.5 allows remote attackers to inject arbitrary web script or HTML via a (1) data:text or (2) vbscript link. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-02/msg00051.html - https://github.com/roundcube/roundcubemail/commit/74cd0a9b62f11bc07c5a1d3ba0098b54883eb0ba - http://lists.opensuse.org/opensuse-updates/2013-09/msg00018.html - http://sourceforge.net/news/?group_id=139281&id=310213 - htt
lists.opensuse.org/opensuse-updates/2013-09/msg00018.html - http://sourceforge.net/news/?group_id=139281&id=310213 - http://www.securityfocus.com/bid/57849 - http://www.openwall.com/lists/oss-security/2013/02/08/1 - http://trac.roundcube.net/ticket/1488850
CVE ID: CVE-2012-6122 State: PUBLISHED Published: 2019-10-31T20:38:34 Last Updated: 2024-08-06T21:28:39.421Z Vendors: chicken Products: chicken Problem Types: Buffer Overflow Description: Buffer overflow in the thread scheduler in Chicken before 4.8.0.1 allows attackers to cause a denial of service (crash) by opening a file descriptor with a large integer value. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-6122 - https://access.redhat.com/security/cve/cve-2012-6122 - http://www.openwall.com/lists/oss-security/2013/02/08/2 - http://lists.gnu.org/archive/html/chicken-announce/2013-10/msg00000.html - http://www.openwall.co
ecurity/2013/02/08/2 - http://lists.gnu.org/archive/html/chicken-announce/2013-10/msg00000.html - http://www.openwall.com/lists/oss-security/2013/05/08/3 - http://www.openwall.com/lists/oss-security/2013/05/09/1 - https://lists.nongnu.org/archive/html/chicken-users/2012-06/msg00031.html - https://lists.nongnu.org/archive/html/chicken-hackers/2012-11/msg00075.html
CVE ID: CVE-2012-6123 State: PUBLISHED Published: 2019-10-31T20:38:39 Last Updated: 2024-08-06T21:28:39.385Z Vendors: chicken Products: chicken Problem Types: Other Description: Chicken before 4.8.0 does not properly handle NUL bytes in certain strings, which allows an attacker to conduct "poisoned NUL byte attack." Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-6123 - https://access.redhat.com/security/cve/cve-2012-6123 - http://www.openwall.com/lists/oss-security/2013/02/08/2
CVE ID: CVE-2012-6124 State: PUBLISHED Published: 2019-10-31T20:38:43 Last Updated: 2024-08-06T21:28:39.540Z Vendors: chicken Products: chicken Problem Types: Type-Check Description: A casting error in Chicken before 4.8.0 on 64-bit platform caused the random number generator to return a constant value. NOTE: the vendor states "This function wasn't used for security purposes (and is advertised as being unsuitable)." Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/02/08/2 - https://security-tracker.debian.org/tracker/CVE-2012-6124 - https://access.redhat.com/security/cve/cve-2012-6124 - https://lists.nongnu.org/archive/html/chic
racker/CVE-2012-6124 - https://access.redhat.com/security/cve/cve-2012-6124 - https://lists.nongnu.org/archive/html/chicken-hackers/2012-02/msg00084.html
CVE ID: CVE-2012-6125 State: PUBLISHED Published: 2019-10-31T20:38:48 Last Updated: 2024-08-06T21:28:39.307Z Vendors: chicken Products: chicken Problem Types: Other Description: Chicken before 4.8.0 is susceptible to algorithmic complexity attacks related to hash table collisions. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/02/08/2 - https://security-tracker.debian.org/tracker/CVE-2012-6125 - https://access.redhat.com/security/cve/cve-2012-6125 - https://lists.nongnu.org/archive/html/chicken-hackers/2012-01/msg00002.html - https://lists.nongnu.org/archive/html/chicken-hackers/2012-01/msg00020.html
CVE ID: CVE-2012-6126 State: REJECTED Published: 2013-02-11T17:00:00Z Last Updated: 2024-09-16T23:21:49.535Z Description: No description available.
CVE ID: CVE-2012-6127 State: REJECTED Published: 2013-02-14T22:00:00Z Last Updated: 2024-09-17T01:32:07.946Z Description: No description available.
CVE ID: CVE-2012-6128 State: PUBLISHED Published: 2013-02-24T19:00:00 Last Updated: 2024-08-06T21:28:39.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in http.c in OpenConnect before 4.08 allow remote VPN gateways to cause a denial of service (application crash) via a long (1) hostname, (2) path, or (3) cookie list in a response. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2013:108 - http://www.infradead.org/openconnect/changelog.html - http://www.openwall.com/lists/oss-security/2013/02/12/7 - http://www.debian.org/security/2013/dsa-2623 - https://exchange.xforce
ww.openwall.com/lists/oss-security/2013/02/12/7 - http://www.debian.org/security/2013/dsa-2623 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82058 - http://www.securityfocus.com/bid/57884 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00115.html - http://git.infradead.org/users/dwmw2/openconnect.git/commitdiff/26f752c3dbf69227679fc6bebb4ae071aecec491 - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0060