Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-2914 State: PUBLISHED Published: 2010-07-30T20:00:00 Last Updated: 2024-08-07T02:46:48.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in nessusd_www_server.nbin in the Nessus Web Server plugin 1.2.4 for Nessus allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40722 - http://www.securitytracker.com/id?1024248 - https://discussions.nessus.org/message/7245#7245 - http://www.securityfocus.com/archive/1/512645/100/0/threaded
CVE ID: CVE-2010-2915 State: PUBLISHED Published: 2010-07-30T20:00:00 Last Updated: 2024-08-07T02:46:48.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in welcome.php in AJ Square AJ HYIP PRIME allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/60589 - http://packetstormsecurity.org/0907-exploits/ajhypeprime-sql.txt - http://www.exploit-db.com/exploits/14435
CVE ID: CVE-2010-2916 State: PUBLISHED Published: 2010-07-30T20:00:00 Last Updated: 2024-08-07T02:46:48.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news.php in AJ Square AJ HYIP MERIDIAN allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14436 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60590 - http://packetstormsecurity.org/1007-exploits/ajhyipmeridian-sql.txt
CVE ID: CVE-2010-2917 State: PUBLISHED Published: 2010-07-30T20:00:00 Last Updated: 2024-08-07T02:46:48.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in AJ Square AJ Article 3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) emailid, (2) fname, (3) lname, (4) company, (5) address1, (6) address2, (7) city, (8) state, (9) zipcode, (10) phone, and (11) fax parameters in an update action. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14354 - http://www.osvdb.org/66
Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14354 - http://www.osvdb.org/66279 - http://www.securityfocus.com/bid/41576 - http://packetstormsecurity.org/1007-exploits/ajarticle-xss.txt - http://secunia.com/advisories/40560 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60357
CVE ID: CVE-2010-2918 State: PUBLISHED Published: 2010-07-30T20:00:00 Last Updated: 2024-08-07T02:46:48.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in core/include/myMailer.class.php in the Visites (com_joomla-visites) component 1.1 RC2 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14476 - http://www.securityfocus.com/bid/28942 - http://www.vupen.com/english/advisories/2010/1925 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42025 - http://packetstormsecur
.com/english/advisories/2010/1925 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42025 - http://packetstormsecurity.org/0804-exploits/joomlavisites-rfi.txt
CVE ID: CVE-2010-2919 State: PUBLISHED Published: 2010-07-30T20:00:00 Last Updated: 2024-08-07T02:46:48.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the StaticXT (com_staticxt) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/60462 - http://www.exploit-db.com/exploits/14395 - http://packetstormsecurity.org/1007-exploits/joomlastaticxt-sql.txt
CVE ID: CVE-2010-2920 State: PUBLISHED Published: 2010-07-30T20:00:00 Last Updated: 2024-08-07T02:46:48.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Foobla Suggestions (com_foobla_suggestions) component 1.5.1.2 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39341 - http://www.vupen.com/english/advisories/2010/1844 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57660 - http://www.exploit-db.com/exploits/12120 - http://packetstormsecurity.org/
e.xforce.ibmcloud.com/vulnerabilities/57660 - http://www.exploit-db.com/exploits/12120 - http://packetstormsecurity.org/1004-exploits/joomlafoobla-lfi.txt
CVE ID: CVE-2010-2921 State: PUBLISHED Published: 2010-07-30T20:00:00 Last Updated: 2024-08-07T02:46:48.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Golf Course Guide (com_golfcourseguide) component 0.9.6.0 beta and 1 beta for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a golfcourses action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/60608 - http://www.exploit-db.com/exploits/14448 - http://packetstormsecurity.org/1007-exploits/joomlagolfcourseguide-sql.txt
CVE ID: CVE-2010-2922 State: PUBLISHED Published: 2010-07-30T20:00:00 Last Updated: 2024-08-07T02:46:48.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.asp in AKY Blog allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40746 - http://packetstormsecurity.org/1007-exploits/akyblog-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/60617 - http://www.exploit-db.com/exploits/14461
CVE ID: CVE-2010-2923 State: PUBLISHED Published: 2010-07-30T20:00:00 Last Updated: 2024-08-07T02:46:48.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the YouTube (com_youtube) component 1.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id_cate parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/60624 - http://www.exploit-db.com/exploits/14467 - http://packetstormsecurity.org/1007-exploits/joomlayoutube-sql.txt - http://www.securityfocus.com/bid/41938
CVE ID: CVE-2010-2924 State: PUBLISHED Published: 2010-07-30T20:00:00 Last Updated: 2024-08-07T02:46:48.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in myLDlinker.php in the myLinksDump Plugin 1.2 for WordPress allows remote attackers to execute arbitrary SQL commands via the url parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14441 - http://secunia.com/advisories/40692 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60591 - http://osvdb.org/66566
CVE ID: CVE-2010-2925 State: PUBLISHED Published: 2010-07-30T20:00:00 Last Updated: 2024-08-07T02:46:48.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Freeway CMS 1.4.3.210 allows remote attackers to execute arbitrary SQL commands via the ecPath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1007-exploits/freewaycms-sql.txt - http://www.securityfocus.com/bid/41960 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60654 - http://www.exploit-db.com/exploits/14474
CVE ID: CVE-2010-2926 State: PUBLISHED Published: 2010-07-30T20:00:00 Last Updated: 2024-08-07T02:46:48.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in sNews 1.7 allows remote attackers to execute arbitrary SQL commands via the category parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14465 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60622
CVE ID: CVE-2010-2927 State: PUBLISHED Published: 2010-08-02T19:00:00 Last Updated: 2024-08-07T02:46:48.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: The slapi_printmessage function in IBM Tivoli Directory Server (ITDS) before 6.0.0.8-TIV-ITDS-IF0006 allows remote attackers to cause a denial of service (daemon crash) via multiple incomplete DIGEST-MD5 connection attempts. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg24027463 - http://osvdb.org/66782 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60821 - http://secunia.com/advisories/40791 - http://www.securityfocus.com/bid/42093 - http://www-01.ibm
vulnerabilities/60821 - http://secunia.com/advisories/40791 - http://www.securityfocus.com/bid/42093 - http://www-01.ibm.com/support/docview.wss?uid=swg1IO12399
CVE ID: CVE-2010-2928 State: PUBLISHED Published: 2011-02-16T00:00:00 Last Updated: 2024-08-07T02:46:48.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vCenter Tomcat Management Application in VMware vCenter Server 4.1 before Update 1 stores log-on credentials in a configuration file, which allows local users to gain privileges by reading this file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/70859 - http://secunia.com/advisories/43307 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - http://securityreason.com/securityalert/8079 - http://www.securi
ww.vmware.com/security/advisories/VMSA-2011-0003.html - http://securityreason.com/securityalert/8079 - http://www.securityfocus.com/archive/1/516397/100/0/threaded
CVE ID: CVE-2010-2929 State: PUBLISHED Published: 2010-08-02T20:00:00 Last Updated: 2024-08-07T02:46:48.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in hsolinkcontrol in hsolink 1.0.118 allows local users to gain privileges via a modified PATH environment variable, which is used during execution of the (1) route, (2) mv, and (3) cp programs, a different vulnerability than CVE-2010-1671. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590670 - http://osvdb.org/66837 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60877 - http://ftp.de.debian.org/debian/pool/main/h/hs
.org/66837 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60877 - http://ftp.de.debian.org/debian/pool/main/h/hsolink/hsolink_1.0.118.orig.tar.gz
CVE ID: CVE-2010-2930 State: PUBLISHED Published: 2010-08-02T20:00:00 Last Updated: 2024-08-07T02:46:48.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in hsolinkcontrol in hsolink 1.0.118 allow local users to gain privileges via long command-line arguments, a different vulnerability than CVE-2010-1671. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/66836 - http://ftp.de.debian.org/debian/pool/main/h/hsolink/hsolink_1.0.118.orig.tar.gz - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590670 - https://exchange.xforce.ibmcloud.com/vul
1.0.118.orig.tar.gz - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590670 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60811 - http://secunia.com/advisories/40713
CVE ID: CVE-2010-2931 State: PUBLISHED Published: 2010-08-04T19:00:00 Last Updated: 2024-08-07T02:46:48.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in SigPlus Pro 3.74 ActiveX control allows remote attackers to execute arbitrary code via a long eighth argument (HexString) to the LCDWriteString method. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11304 - http://secunia.com/advisories/40818 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60839 - http://www.exploit-db.com/exploits/14514
CVE ID: CVE-2010-2932 State: PUBLISHED Published: 2010-08-04T19:00:00 Last Updated: 2024-08-07T02:46:48.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in BarCodeWiz BarCode 3.29 ActiveX control (BarcodeWiz.dll) allows remote attackers to execute arbitrary code via a long argument to the LoadProperties method. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/42097 - http://secunia.com/advisories/40786 - http://www.exploit-db.com/exploits/14505 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60838 - http://www.exploit-db.com/exploits/14504 - http://www.exploit-db.com/exploits/14519
CVE ID: CVE-2010-2933 State: PUBLISHED Published: 2010-08-04T19:00:00 Last Updated: 2024-08-07T02:46:48.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in AV Scripts AV Arcade 3 allows remote attackers to execute arbitrary SQL commands via the ava_code cookie to the "main page," related to index.php and the login task. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/42023 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60799 - http://www.exploit-db.com/exploits/14494
CVE ID: CVE-2010-2934 State: PUBLISHED Published: 2010-08-17T18:00:00Z Last Updated: 2024-08-07T02:46:48.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in ZNC 0.092 allow remote attackers to cause a denial of service (exception and daemon crash) via unknown vectors related to "unsafe substr() calls." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2071 - http://secunia.com/advisories/40919 - http://znc.svn.sourceforge.net/viewvc/znc?view=revision&revision=2095 - http://lists.fedoraproject.org/pipermail/package-announce/2010-August/045385.html - https://bugzilla.redhat.com/show_
- http://lists.fedoraproject.org/pipermail/package-announce/2010-August/045385.html - https://bugzilla.redhat.com/show_bug.cgi?id=622600 - http://www.securityfocus.com/bid/42314 - http://marc.info/?l=oss-security&m=128152390219401&w=2 - http://marc.info/?l=oss-security&m=128146352011964&w=2 - http://marc.info/?l=oss-security&m=128146120727810&w=2 - http://lists.fedoraproject.org/pipermail/package-announce/2010-August/045386.html - http://secunia.com/advisories/40970
CVE ID: CVE-2010-2935 State: PUBLISHED Published: 2010-08-25T19:00:00 Last Updated: 2024-08-07T02:46:48.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: simpress.bin in the Impress module in OpenOffice.org (OOo) 2.x and 3.x before 3.3 does not properly handle integer values associated with dictionary property items, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PowerPoint document that triggers a heap-based buffer overflow, related to an "integer truncation error." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40775 - http://www.openoffice.org/serv
alyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40775 - http://www.openoffice.org/servlets/ReadMsg?list=dev&msgNo=27690 - https://bugzilla.redhat.com/show_bug.cgi?id=622529 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:221 - http://www.vupen.com/english/advisories/2010/2003 - http://secunia.com/advisories/60799 - http://www.securitytracker.com/id?1024976 - http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12063 - http://www.vupen.com/english/advisories/2011/0150 - http://secunia.com/advisories/42927 - http://www.redhat.com/support/errata/RHSA-2010
.com/english/advisories/2011/0150 - http://secunia.com/advisories/42927 - http://www.redhat.com/support/errata/RHSA-2010-0643.html - http://www.vupen.com/english/advisories/2011/0230 - http://www.vupen.com/english/advisories/2010/2149 - http://www.openwall.com/lists/oss-security/2010/08/11/1 - http://www.vupen.com/english/advisories/2010/2228 - http://www.openoffice.org/security/cves/CVE-2010-2935_CVE-2010-2936.html - http://secunia.com/advisories/41235 - http://ubuntu.com/usn/usn-1056-1 - http://www.vupen.com/english/advisories/2011/0279 - http://www.securitytracker.com/id?1024352 - http://secunia.com/advisories/43105 - http://securityevaluators.com/files/papers/CrashAnalysis.pdf - http://l
?1024352 - http://secunia.com/advisories/43105 - http://securityevaluators.com/files/papers/CrashAnalysis.pdf - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html - http://www.debian.org/security/2010/dsa-2099 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html - http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html - http://secunia.com/advisories/41052 - http://www.vupen.com/english/advisories/2010/2905 - http://www.openwall.com/lists/oss-security/2010/08/11/4
CVE ID: CVE-2010-2936 State: PUBLISHED Published: 2010-08-25T19:00:00 Last Updated: 2024-08-07T02:46:48.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in simpress.bin in the Impress module in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted polygons in a PowerPoint document that triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40775 - http://www.openoffice.org/servlets/ReadMsg?list=dev&msgNo=27690 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:221
w.openoffice.org/servlets/ReadMsg?list=dev&msgNo=27690 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:221 - http://www.vupen.com/english/advisories/2010/2003 - http://secunia.com/advisories/60799 - http://www.securitytracker.com/id?1024976 - http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml - http://www.vupen.com/english/advisories/2011/0150 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12144 - http://secunia.com/advisories/42927 - http://www.redhat.com/support/errata/RHSA-2010-0643.html - http://www.vupen.com/english/advisories/2011/0230 - http://www.vupen.com/english/advisories/2010/2149 - http://www.openwall.com/lists/oss-s
m/english/advisories/2011/0230 - http://www.vupen.com/english/advisories/2010/2149 - http://www.openwall.com/lists/oss-security/2010/08/11/1 - http://www.vupen.com/english/advisories/2010/2228 - http://www.openoffice.org/security/cves/CVE-2010-2935_CVE-2010-2936.html - https://bugzilla.redhat.com/show_bug.cgi?id=622529#c6 - http://secunia.com/advisories/41235 - http://ubuntu.com/usn/usn-1056-1 - https://bugzilla.redhat.com/show_bug.cgi?id=622555 - http://www.vupen.com/english/advisories/2011/0279 - http://www.securitytracker.com/id?1024352 - http://secunia.com/advisories/43105 - http://securityevaluators.com/files/papers/CrashAnalysis.pdf - http://lists.opensuse.org/opensuse-security-announc
105 - http://securityevaluators.com/files/papers/CrashAnalysis.pdf - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html - http://www.debian.org/security/2010/dsa-2099 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html - http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html - http://secunia.com/advisories/41052 - http://www.vupen.com/english/advisories/2010/2905 - http://www.openwall.com/lists/oss-security/2010/08/11/4
CVE ID: CVE-2010-2937 State: PUBLISHED Published: 2010-08-20T17:00:00 Last Updated: 2024-08-07T02:46:48.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadMetaFromId3v2 function in taglib.cpp in the TagLib plugin in VideoLAN VLC media player 0.9.0 through 1.1.2 does not properly process ID3v2 tags, which allows remote attackers to cause a denial of service (application crash) via a crafted media file. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=vlc/vlc-1.0.git%3Ba=commit%3Bh=22a22e356c9d93993086810b2e25b59b55925b3a - http://git.videolan.org/?p=vlc/vlc-1.1.git%3Ba=commit%3Bh=24918843e57c7962e28fcb01845adce82bed6516 - http://
b55925b3a - http://git.videolan.org/?p=vlc/vlc-1.1.git%3Ba=commit%3Bh=24918843e57c7962e28fcb01845adce82bed6516 - http://www.videolan.org/security/sa1004.html - http://www.securityfocus.com/bid/42386 - http://www.vupen.com/english/advisories/2010/2087 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14676
CVE ID: CVE-2010-2938 State: PUBLISHED Published: 2010-10-08T20:00:00 Last Updated: 2024-08-07T02:55:45.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: arch/x86/hvm/vmx/vmcs.c in the virtual-machine control structure (VMCS) implementation in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5, when an Intel platform without Extended Page Tables (EPT) functionality is used, accesses VMCS fields without verifying hardware support for these fields, which allows local users to cause a denial of service (host OS crash) by requesting a VMCS dump for a fully virtualized Xen guest. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support
ly virtualized Xen guest. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0723.html - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://www.securityfocus.com/bid/43578 - http://secunia.com/advisories/46397 - http://xenbits.xensource.com/xen-unstable.hg?rev/15911 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://support.avaya.com/css/P8/documents/100113326 - https://bugzilla.redhat.com/show_bug.cgi?id=620490
CVE ID: CVE-2010-2939 State: PUBLISHED Published: 2010-08-17T17:31:00 Last Updated: 2024-08-07T02:55:45.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the ssl3_get_key_exchange function in the OpenSSL client (ssl/s3_clnt.c) in OpenSSL 1.0.0a, 0.9.8, 0.9.7, and possibly other versions, when using ECDH, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted private key with an invalid prime. NOTE: some sources refer to this as a use-after-free issue. Additional Analyst Notes: - CVE Program Container: References: - http://slackware.com/security/viewer.php?l=slackware-security&y=2010&
lyst Notes: - CVE Program Container: References: - http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.668793 - http://www.mail-archive.com/openssl-dev%40openssl.org/msg28049.html - http://marc.info/?l=bugtraq&m=130331363227777&w=2 - http://secunia.com/advisories/42413 - http://secunia.com/advisories/40906 - http://www.debian.org/security/2010/dsa-2100 - http://www.openwall.com/lists/oss-security/2010/08/11/6 - http://seclists.org/fulldisclosure/2010/Aug/84 - http://www.vupen.com/english/advisories/2010/2229 - http://www.vupen.com/english/advisories/2010/2038 - http://securitytracker.com/id?1024296 - http://www.ubuntu.com/usn/USN-1003-1 - http://marc.inf