Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
n/USN-1527-1 - https://support.apple.com/HT205637 - http://www.securitytracker.com/id/1034344 - http://expat.cvs.sourceforge.net/viewvc/expat/expat/lib/xmlparse.c?r1=1.166&r2=1.167 - http://secunia.com/advisories/51040 - http://rhn.redhat.com/errata/RHSA-2012-0731.html - http://www.securityfocus.com/bid/52379 - http://sourceforge.net/projects/expat/files/expat/2.1.0/ - http://rhn.redhat.com/errata/RHSA-2016-0062.html - http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html - http://www.debian.org/security/2012/dsa-2525 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:041 - http://sourceforge.net/tracker/?func=detail&atid=110127&aid=2958794&group_id=10127 - http
visories?name=MDVSA-2012:041 - http://sourceforge.net/tracker/?func=detail&atid=110127&aid=2958794&group_id=10127 - http://rhn.redhat.com/errata/RHSA-2016-2957.html - http://www.ubuntu.com/usn/USN-1613-2 - http://secunia.com/advisories/51024 - http://www.ubuntu.com/usn/USN-1613-1
CVE ID: CVE-2012-1149 State: PUBLISHED Published: 2012-06-21T15:00:00 Last Updated: 2024-08-06T18:45:27.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the vclmi.dll module in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted embedded image object, as demonstrated by a JPEG image in a .DOC file, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60799 - http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml
ontainer: References: - http://secunia.com/advisories/60799 - http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml - http://security.gentoo.org/glsa/glsa-201209-05.xml - http://archives.neohapsis.com/archives/bugtraq/2012-05/0089.html - http://www.osvdb.org/81988 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:090 - http://www.debian.org/security/2012/dsa-2473 - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082168.html - http://secunia.com/advisories/49140 - http://www.securityfocus.com/bid/53570 - http://www.openoffice.org/security/cves/CVE-2012-1149.html - http://www.debian.org/security/2012/dsa-2487 - http://secunia.com/advisories/46992 - http://se
cves/CVE-2012-1149.html - http://www.debian.org/security/2012/dsa-2487 - http://secunia.com/advisories/46992 - http://secunia.com/advisories/47244 - http://secunia.com/advisories/49392 - http://secunia.com/advisories/49373 - http://secunia.com/advisories/50692 - http://www.libreoffice.org/advisories/cve-2012-1149/ - http://rhn.redhat.com/errata/RHSA-2012-0705.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081319.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:091 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75692 - http://securitytracker.com/id?1027068
CVE ID: CVE-2012-1150 State: PUBLISHED Published: 2012-10-05T21:00:00 Last Updated: 2024-08-06T18:45:27.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1615-1 - http://python.org/download/releases/3.2.3/ - http://secunia.com/advisories/51087 - http://www.ubuntu
om/usn/USN-1615-1 - http://python.org/download/releases/3.2.3/ - http://secunia.com/advisories/51087 - http://www.ubuntu.com/usn/USN-1592-1 - http://bugs.python.org/issue13703 - http://www.ubuntu.com/usn/USN-1616-1 - http://mail.python.org/pipermail/python-dev/2011-December/115116.html - http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html - http://secunia.com/advisories/50858 - http://secunia.com/advisories/51089 - http://mail.python.org/pipermail/python-dev/2012-January/115892.html - https://bugzilla.redhat.com/show_bug.cgi?id=750555 - http://python.org/download/releases/2.6.8/ - http://www.openwall.com/lists/oss-security/2012/03/10/3 - http://www.ubuntu.com/usn/USN-159
g/download/releases/2.6.8/ - http://www.openwall.com/lists/oss-security/2012/03/10/3 - http://www.ubuntu.com/usn/USN-1596-1 - http://python.org/download/releases/3.1.5/ - http://python.org/download/releases/2.7.3/ - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html
CVE ID: CVE-2012-1151 State: PUBLISHED Published: 2012-09-09T21:00:00 Last Updated: 2024-08-06T18:45:27.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in dbdimp.c in DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.19.0 for Perl allow remote PostgreSQL database servers to cause a denial of service (process crash) via format string specifiers in (1) a crafted database warning to the pg_warn function or (2) a crafted DBD statement to the dbd_st_prepare function. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/03/10/4 - http://www.mandriva.com/security/advisories?name=M
ferences: - http://www.openwall.com/lists/oss-security/2012/03/10/4 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:112 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73854 - http://secunia.com/advisories/48307 - http://rhn.redhat.com/errata/RHSA-2012-1116.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=661536 - http://cpansearch.perl.org/src/TURNSTEP/DBD-Pg-2.19.1/Changes - https://bugzilla.redhat.com/show_bug.cgi?id=801733 - http://www.openwall.com/lists/oss-security/2012/03/09/6 - http://secunia.com/advisories/48319 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73855 - http://security.gentoo.org/glsa/glsa-201204-08.xml - http://www.debian.org/securit
.ibmcloud.com/vulnerabilities/73855 - http://security.gentoo.org/glsa/glsa-201204-08.xml - http://www.debian.org/security/2012/dsa-2431 - http://secunia.com/advisories/48824 - https://rt.cpan.org/Public/Bug/Display.html?id=75642
CVE ID: CVE-2012-1152 State: PUBLISHED Published: 2012-09-09T21:00:00 Last Updated: 2024-08-06T18:45:27.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in the error reporting functionality in the YAML::LibYAML (aka YAML-LibYAML and perl-YAML-LibYAML) module 0.38 for Perl allow remote attackers to cause a denial of service (process crash) via format string specifiers in a (1) YAML stream to the Load function, (2) YAML node to the load_node function, (3) YAML mapping to the load_mapping function, or (4) YAML sequence to the load_sequence function. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/list
he load_sequence function. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/03/10/4 - http://lists.opensuse.org/opensuse-updates/2012-08/msg00029.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077004.html - http://secunia.com/advisories/48317 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077023.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=661548 - http://lists.opensuse.org/opensuse-updates/2015-02/msg00078.html - http://www.securityfocus.com/bid/52381 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73856 - http://secunia.com/advisories/50277 - http://www.ope
2381 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73856 - http://secunia.com/advisories/50277 - http://www.openwall.com/lists/oss-security/2012/03/09/6 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077782.html - https://rt.cpan.org/Public/Bug/Display.html?id=75365 - https://rt.cpan.org/Public/Bug/Display.html?id=46507 - http://www.debian.org/security/2012/dsa-2432 - https://bugzilla.redhat.com/show_bug.cgi?id=801738
CVE ID: CVE-2012-1153 State: PUBLISHED Published: 2012-10-06T21:00:00 Last Updated: 2024-08-06T18:45:27.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in addons/uploadify/uploadify.php in appRain CMF 0.1.5 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the uploads directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/78473 - http://www.openwall.com/lists/oss-security/2012/03/09/5 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72466 - http://www.securityfocus.com/bid/515
ecurity/2012/03/09/5 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72466 - http://www.securityfocus.com/bid/51576 - http://archives.neohapsis.com/archives/bugtraq/2012-01/0128.html - http://www.exploit-db.com/exploits/18392 - http://www.exploit-db.com/exploits/18922 - http://www.openwall.com/lists/oss-security/2012/03/10/5
CVE ID: CVE-2012-1154 State: PUBLISHED Published: 2012-10-22T23:00:00Z Last Updated: 2024-08-06T18:45:27.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod_cluster 1.0.10 before 1.0.10 CP03 and 1.1.x before 1.1.4, as used in JBoss Enterprise Application Platform 5.1.2, when "ROOT" is set to excludedContexts, exposes the root context of the server, which allows remote attackers to bypass access restrictions and gain access to applications deployed on the root context via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1012.html - http://rhn.redhat.com/errata/RHSA-2012-1166.html - http://rhn.redhat.co
tp://rhn.redhat.com/errata/RHSA-2012-1012.html - http://rhn.redhat.com/errata/RHSA-2012-1166.html - http://rhn.redhat.com/errata/RHSA-2012-1052.html - http://rhn.redhat.com/errata/RHSA-2012-1053.html - https://issues.jboss.org/browse/MODCLUSTER-253 - http://secunia.com/advisories/49636 - https://bugzilla.redhat.com/show_bug.cgi?id=802200 - http://rhn.redhat.com/errata/RHSA-2012-1010.html - http://rhn.redhat.com/errata/RHSA-2012-1011.html - https://community.jboss.org/message/624018
CVE ID: CVE-2012-1155 State: PUBLISHED Published: 2019-11-14T15:48:08 Last Updated: 2024-08-06T18:53:35.521Z Vendors: Moodle Products: Moodle Problem Types: UNKNOWN_TYPE Description: Moodle has a database activity export permission issue where the export function of the database activity module exports all entries even those from groups the user does not belong to Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-1155 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1155 - https://access.redhat.com/security/cve/cve-2012-1155 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html - http://lis
curity/cve/cve-2012-1155 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.html - https://moodle.org/mod/forum/discuss.php?d=198621
CVE ID: CVE-2012-1156 State: PUBLISHED Published: 2019-11-14T16:01:05 Last Updated: 2024-08-06T18:53:35.446Z Vendors: Moodle Products: Moodle Problem Types: UNKNOWN_TYPE Description: Moodle before 2.2.2 has users' private files included in course backups Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html - https://security-tracker.debian.org/tracker/CVE-2012-1156 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1156 - https://access.redhat.com/security/cve/cve-2012-1156 - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.html - http://lists.fedoraproject.org/pipermail/
tp://lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.html - https://moodle.org/mod/forum/discuss.php?d=198623
CVE ID: CVE-2012-1157 State: PUBLISHED Published: 2019-11-14T16:05:42 Last Updated: 2024-08-06T18:53:35.447Z Vendors: Moodle Products: Moodle Problem Types: UNKNOWN_TYPE Description: Moodle before 2.2.2 has a default repository capabilities issue where all repositories are viewable by all users by default Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html - https://security-tracker.debian.org/tracker/CVE-2012-1157 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1157 - https://access.redhat.com/security/cve/cve-2012-1157 - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081
://access.redhat.com/security/cve/cve-2012-1157 - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.html - https://moodle.org/mod/forum/discuss.php?d=198624
CVE ID: CVE-2012-1158 State: PUBLISHED Published: 2019-11-14T16:09:56 Last Updated: 2024-08-06T18:53:35.435Z Vendors: Moodle Products: Moodle Problem Types: UNKNOWN_TYPE Description: Moodle before 2.2.2 has a course information leak in gradebook where users are able to see hidden grade items in export Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.html - https://security-tracker.debian.org/tracker/CVE-2012-1158 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1158 - https://access.redhat.com/security/cve/cve-2012-
2012-1158 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1158 - https://access.redhat.com/security/cve/cve-2012-1158 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.html - https://moodle.org/mod/forum/discuss.php?d=198627
CVE ID: CVE-2012-1159 State: PUBLISHED Published: 2019-11-14T16:16:55 Last Updated: 2024-08-06T18:53:35.576Z Vendors: Moodle Products: Moodle Problem Types: UNKNOWN_TYPE Description: Moodle before 2.2.2: Overview report allows users to see hidden courses Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.html - https://security-tracker.debian.org/tracker/CVE-2012-1159 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1159 - https://access.redhat.com/security/cve/cve-2012-1159 - http://lists.fedoraproject.org/pipermail/
.cgi?id=CVE-2012-1159 - https://access.redhat.com/security/cve/cve-2012-1159 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.html - https://moodle.org/mod/forum/discuss.php?d=198628
CVE ID: CVE-2012-1160 State: PUBLISHED Published: 2019-11-14T16:21:05 Last Updated: 2024-08-06T18:53:35.447Z Vendors: Moodle Products: Moodle Problem Types: UNKNOWN_TYPE Description: Moodle before 2.2.2 has a permission issue in Forum Subscriptions where unenrolled users can subscribe/unsubscribe via mod/forum/index.php Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html - https://security-tracker.debian.org/tracker/CVE-2012-1160 - https:
g/pipermail/package-announce/2012-April/078210.html - https://security-tracker.debian.org/tracker/CVE-2012-1160 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1160 - https://access.redhat.com/security/cve/cve-2012-1160 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.html - https://moodle.org/mod/forum/discuss.php?d=198629
CVE ID: CVE-2012-1161 State: PUBLISHED Published: 2019-11-14T16:34:04 Last Updated: 2024-08-06T18:53:35.446Z Vendors: Moodle Products: Moodle Problem Types: UNKNOWN_TYPE Description: Moodle before 2.2.2: Course information leak via hidden courses being displayed in tag search results Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html - https://security-tracker.debian.org/tracker/CVE-2012-1161 - https://bugzilla.redhat.com/show_bug.cgi?id
il/078210.html - https://security-tracker.debian.org/tracker/CVE-2012-1161 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1161 - https://access.redhat.com/security/cve/cve-2012-1161 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.html - https://moodle.org/mod/forum/discuss.php?d=198630
CVE ID: CVE-2012-1162 State: PUBLISHED Published: 2012-07-12T20:00:00Z Last Updated: 2024-09-16T20:37:08.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a zip archive with the number of directories set to 0, related to an "incorrect loop construct." Additional Analyst Notes: - CVE Program Container: References: - http://nih.at/listarchive/libzip-discuss/msg00252.html - http://www.openwall.com/lists/oss-security/2012/03/21/2 - http://www.mandriva.com/security/advisories?name=MDVSA-
html - http://www.openwall.com/lists/oss-security/2012/03/21/2 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:034 - http://www.nih.at/libzip/NEWS.html - http://www.openwall.com/lists/oss-security/2012/03/29/11 - http://www.gentoo.org/security/en/glsa/glsa-201203-23.xml
CVE ID: CVE-2012-1163 State: PUBLISHED Published: 2012-07-12T20:00:00Z Last Updated: 2024-09-17T00:26:22.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote attackers to execute arbitrary code via the size and offset values for the central directory in a zip archive, which triggers "improper restrictions of operations within the bounds of a memory buffer" and an information leak. Additional Analyst Notes: - CVE Program Container: References: - http://nih.at/listarchive/libzip-discuss/msg00252.html - http://www.openwall.com/lists/oss-security/2012/03/21/2 - http://www.mandriva.com/security/ad
ip-discuss/msg00252.html - http://www.openwall.com/lists/oss-security/2012/03/21/2 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:034 - http://www.nih.at/libzip/NEWS.html - http://www.openwall.com/lists/oss-security/2012/03/29/11 - http://www.gentoo.org/security/en/glsa/glsa-201203-23.xml
CVE ID: CVE-2012-1164 State: PUBLISHED Published: 2012-06-29T19:00:00 Last Updated: 2024-08-06T18:53:35.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an LDAP search query with attrsOnly set to true, which causes empty attributes to be returned. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201406-36.xml - http://secunia.com/advisories/49607 - http://secunia.com/advisories/48372 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:130 - http://www.openldap.org/its/index.cgi/Software%20Bug
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:130 - http://www.openldap.org/its/index.cgi/Software%20Bugs?id=7143 - http://rhn.redhat.com/errata/RHSA-2012-0899.html - http://www.securityfocus.com/bid/52404 - http://www.openldap.org/software/release/changes.html - https://support.apple.com/kb/HT210788 - https://seclists.org/bugtraq/2019/Dec/23 - http://seclists.org/fulldisclosure/2019/Dec/26
CVE ID: CVE-2012-1165 State: PUBLISHED Published: 2012-03-15T17:00:00 Last Updated: 2024-08-06T18:53:36.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mime_param_cmp function in crypto/asn1/asn_mime.c in OpenSSL before 0.9.8u and 1.x before 1.0.0h allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message, a different vulnerability than CVE-2006-7250. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077666.html - http://rhn.redhat.com/errata/RHSA-2012-0531.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Docum
/077666.html - http://rhn.redhat.com/errata/RHSA-2012-0531.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html - http://secunia.com/advisories/48899 - https://downloads.avaya.com/css/P8/documents/100162507 - http://rhn.redhat.com/errata/RHSA-2012-1308.html - http://www.openwall.com/lists/oss-security/2012/03/12/3 - http://rhn.redhat.com/errata/RHSA-2012-1307.html - http://www.openwall.com/lists/oss-security/2012/03/12/6 - http://rhn.redhat.com/errata/RHSA-2012-0488.html - http://www.debian.org/security/2012/dsa-2454 - http://www.ubuntu.com/usn/USN-1424-1 - http://secunia.
A-2012-0488.html - http://www.debian.org/security/2012/dsa-2454 - http://www.ubuntu.com/usn/USN-1424-1 - http://secunia.com/advisories/48895 - http://secunia.com/advisories/48580 - http://rhn.redhat.com/errata/RHSA-2012-1306.html - http://www.securitytracker.com/id?1026787 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077086.html - http://marc.info/?l=bugtraq&m=134039053214295&w=2 - http://rhn.redhat.com/errata/RHSA-2012-0426.html - http://cvs.openssl.org/chngview?cn=22252 - http://marc.info/?l=bugtraq&m=133728068926468&w=2 - http://marc.info/?l=bugtraq&m=134039053214295&w=2 - http://www.securityfocus.com/bid/52764 - http://h20000.www2.hp.com/bizsupport/TechSupport/D
traq&m=134039053214295&w=2 - http://www.securityfocus.com/bid/52764 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077221.html - http://www.openwall.com/lists/oss-security/2012/03/13/2 - http://www.openwall.com/lists/oss-security/2012/03/12/7 - http://marc.info/?l=bugtraq&m=133728068926468&w=2
CVE ID: CVE-2012-1166 State: PUBLISHED Published: 2014-05-21T14:00:00 Last Updated: 2024-08-06T18:53:35.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default keybindings for wwm in LTSP Display Manager (ldm) 2.2.x before 2.2.7 allow remote attackers to execute arbitrary commands via the KP_RETURN keybinding, which launches a terminal window. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1398-1 - http://irclogs.ltsp.org/?d=2012-03-12 - https://bugs.launchpad.net/ubuntu/%2Bsource/ldm/%2Bbug/953340