Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-0721 State: PUBLISHED Published: 2010-02-26T20:00:00 Last Updated: 2024-08-07T00:59:38.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news.php in Auktionshaus Gelb 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11488 - http://packetstormsecurity.org/1002-exploits/auktionshausgelb-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/56332
CVE ID: CVE-2010-0722 State: PUBLISHED Published: 2010-02-26T20:00:00 Last Updated: 2024-08-07T00:59:38.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news.php in Php Auktion Pro allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56478 - http://4004securityproject.wordpress.com/2010/02/22/php-auktion-pro-sql-injection-news-php/ - http://www.securityfocus.com/bid/38371 - http://www.exploit-db.com/exploits/11547 - http://secunia.com/advisories/38679
CVE ID: CVE-2010-0723 State: PUBLISHED Published: 2010-02-26T20:00:00 Last Updated: 2024-08-07T00:59:38.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news.php in Ero Auktion 2.0 and 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1002-exploits/eroauktion2010-sql.txt - http://www.exploit-db.com/exploits/11521 - http://packetstormsecurity.org/1002-exploits/eroauktion20-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/56446 - http://4004securityproject.wordpress.com/2010/02/21/ero-auktion-2010-sql-inje
force.ibmcloud.com/vulnerabilities/56446 - http://4004securityproject.wordpress.com/2010/02/21/ero-auktion-2010-sql-injection-news-php/ - http://www.exploit-db.com/exploits/11522 - http://secunia.com/advisories/38666 - http://4004securityproject.wordpress.com/2010/02/21/ero-auktion-v-2-0-sql-injection-news-php/
CVE ID: CVE-2010-0724 State: PUBLISHED Published: 2010-02-26T20:00:00 Last Updated: 2024-08-07T00:59:38.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/0443 - http://packetstormsecurity.org/1002-exploits/arabcart-sqlxss.txt - http://www.exploit-db.com/exploits/11524 - http://www.securityfocus.com/bid/38426
CVE ID: CVE-2010-0725 State: PUBLISHED Published: 2010-02-26T20:00:00 Last Updated: 2024-08-07T00:59:38.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/0443 - http://packetstormsecurity.org/1002-exploits/arabcart-sqlxss.txt - http://www.exploit-db.com/exploits/11524 - http://www.securityfocus.com/bid/38426
CVE ID: CVE-2010-0726 State: PUBLISHED Published: 2010-03-02T19:00:00Z Last Updated: 2024-09-16T17:49:13.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the tb-send.rb (TrackBack transmission) plugin in tDiary 2.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors, possibly related to the (1) plugin_tb_url and (2) plugin_tb_excerpt parameters. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/62562 - http://jvn.jp/en/jp/JVN73331060/index.html - http://tdiary.svn.sourceforge.net/viewvc/tdiary/branches/Stable-2_2/plugin/tb-send.rb?r1=3238&r2=3573 - http://se
html - http://tdiary.svn.sourceforge.net/viewvc/tdiary/branches/Stable-2_2/plugin/tb-send.rb?r1=3238&r2=3573 - http://secunia.com/advisories/38742 - http://www.tdiary.org/20100225.html - http://www.securityfocus.com/bid/38413 - http://jvndb.jvn.jp/jvndb/JVNDB-2010-000005
CVE ID: CVE-2010-0727 State: PUBLISHED Published: 2010-03-16T19:00:00 Last Updated: 2024-08-07T00:59:38.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gfs2_lock function in the Linux kernel before 2.6.34-rc1-next-20100312, and the gfs_lock function in the Linux kernel on Red Hat Enterprise Linux (RHEL) 5 and 6, does not properly remove POSIX locks on files that are setgid without group-execute permission, which allows local users to cause a denial of service (BUG and system crash) by locking a file on a (1) GFS or (2) GFS2 filesystem, and then changing this file's permissions. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/
this file's permissions. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0330.html - http://www.openwall.com/lists/oss-security/2010/03/12/1 - http://www.redhat.com/support/errata/RHSA-2010-0380.html - http://lkml.org/lkml/2010/3/11/269 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11392 - http://securitytracker.com/id?1023809 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:066 - http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.34-rc1-next-20100312.bz2 - http://www.debian.org/security/2010/dsa-2053 - http://www.redhat.com/support/errata/RHSA-2010-0521.html - htt
0312.bz2 - http://www.debian.org/security/2010/dsa-2053 - http://www.redhat.com/support/errata/RHSA-2010-0521.html - http://secunia.com/advisories/39830 - https://bugzilla.redhat.com/show_bug.cgi?id=570863
CVE ID: CVE-2010-0728 State: PUBLISHED Published: 2010-03-09T19:00:00Z Last Updated: 2024-08-07T00:59:38.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: smbd in Samba 3.3.11, 3.4.6, and 3.5.0, when libcap support is enabled, runs with the CAP_DAC_OVERRIDE capability, which allows remote authenticated users to bypass intended file permissions via standard filesystem operations with any client. Additional Analyst Notes: - CVE Program Container: References: - http://lists.samba.org/archive/samba-announce/2010/000211.html - http://www.samba.org/samba/security/CVE-2010-0728 - http://www.samba.org/samba/history/samba-3.4.7.html - https://bugzilla.samba.org/show_bug.cgi?id=7222 - ht
E-2010-0728 - http://www.samba.org/samba/history/samba-3.4.7.html - https://bugzilla.samba.org/show_bug.cgi?id=7222 - http://www.samba.org/samba/history/samba-3.3.12.html - http://www.samba.org/samba/history/samba-3.5.1.html
CVE ID: CVE-2010-0729 State: PUBLISHED Published: 2010-03-16T19:00:00 Last Updated: 2024-08-07T00:59:38.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain Red Hat patch for the Linux kernel in Red Hat Enterprise Linux (RHEL) 4 on the ia64 platform allows local users to use ptrace on an arbitrary process, and consequently gain privileges, via vectors related to a missing ptrace_check_attach call. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/03/12/2 - http://www.securityfocus.com/bid/38702 - http://www.redhat.com/support/errata/RHSA-2010-0394.html - https://oval.cisecurity.org/repository/search/definitio
702 - http://www.redhat.com/support/errata/RHSA-2010-0394.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8687 - https://bugzilla.redhat.com/show_bug.cgi?id=572007 - http://support.avaya.com/css/P8/documents/100090459
CVE ID: CVE-2010-0730 State: PUBLISHED Published: 2010-05-11T23:00:00 Last Updated: 2024-08-07T00:59:39.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MMIO instruction decoder in the Xen hypervisor in the Linux kernel 2.6.18 in Red Hat Enterprise Linux (RHEL) 5 allows guest OS users to cause a denial of service (32-bit guest OS crash) via vectors that trigger an unspecified instruction emulation. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/05/07/1 - http://www.securityfocus.com/bid/39979 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11430 - http://secunia.com/a
79 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11430 - http://secunia.com/advisories/39649 - http://secunia.com/advisories/43315 - http://www.redhat.com/support/errata/RHSA-2010-0398.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - http://support.avaya.com/css/P8/documents/100088287 - http://www.securityfocus.com/archive/1/516397/100/0/threaded - https://bugzilla.redhat.com/show_bug.cgi?id=572971
CVE ID: CVE-2010-0731 State: PUBLISHED Published: 2010-03-26T18:00:00 Last Updated: 2024-08-07T00:59:39.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gnutls_x509_crt_get_serial function in the GnuTLS library before 1.2.1, when running on big-endian, 64-bit platforms, calls the asn1_read_value with a pointer to the wrong data type and the wrong length value, which allows remote attackers to bypass the certificate revocation list (CRL) check and cause a stack-based buffer overflow via a crafted X.509 certificate, related to extraction of a serial number. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0167.ht
Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0167.html - http://secunia.com/advisories/39127 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:089 - http://www.securityfocus.com/bid/38959 - http://www.vupen.com/english/advisories/2010/0713 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9759 - http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/4230 - https://bugzilla.redhat.com/show_bug.cgi?id=573028 - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - http://www.vupen.com/english/advisories/2010/1054
CVE ID: CVE-2010-0732 State: PUBLISHED Published: 2010-03-19T19:00:00 Last Updated: 2024-08-07T00:59:38.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs implicit paints on windows of type GDK_WINDOW_FOREIGN, which triggers an X error in certain circumstances and consequently allows physically proximate attackers to bypass screen locking and access an unattended workstation by pressing the Enter key many times. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39317 - http://www.openwall.com/lists/oss-security/2010/02/12/1 - http://www.openwal
es: - http://secunia.com/advisories/39317 - http://www.openwall.com/lists/oss-security/2010/02/12/1 - http://www.openwall.com/lists/oss-security/2010/03/16/9 - http://www.securityfocus.com/bid/38211 - https://bugzilla.redhat.com/show_bug.cgi?id=565527 - http://git.gnome.org/browse/gnome-screensaver/commit/?id=ab08cc93f2dc6223c8c00bfa1ca4f2d89069dbe0 - http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html - http://ftp.gnome.org/pub/gnome/sources/gtk+/2.18/gtk+-2.18.5.news - http://www.mandriva.com/security/advisories?name=MDVSA-2010:109 - http://git.gnome.org/browse/gnome-screensaver/commit/?h=gnome-2-28&id=98f8a22412cf388217fd5b88915eadd274d68520 - https://bugs.edge.laun
e.org/browse/gnome-screensaver/commit/?h=gnome-2-28&id=98f8a22412cf388217fd5b88915eadd274d68520 - https://bugs.edge.launchpad.net/ubuntu/+source/gnome-screensaver/+bug/446395 - https://bugzilla.gnome.org/show_bug.cgi?id=598476 - http://www.openwall.com/lists/oss-security/2010/03/05/2 - http://git.gnome.org/browse/gtk+/commit/?id=0748cf563d0d0d03001a62589f13be16a8ec06c1 - http://www.heise.de/newsticker/meldung/Gnome-Bildschirmsperre-in-OpenSuse-Linux-wirkungslos-2-Update-928580.html
CVE ID: CVE-2010-0733 State: PUBLISHED Published: 2010-03-19T19:00:00 Last Updated: 2024-08-07T00:59:38.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in src/backend/executor/nodeHash.c in PostgreSQL 8.4.1 and earlier, and 8.5 through 8.5alpha2, allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with many LEFT JOIN clauses, related to certain hashtable size calculations. Additional Analyst Notes: - CVE Program Container: References: - http://archives.postgresql.org/pgsql-bugs/2009-10/msg00277.php - http://www.redhat.com/support/errata/RHSA-2010-0427.html - http://www.redhat.com/support/errata/RHSA-2010-0428.h
7.php - http://www.redhat.com/support/errata/RHSA-2010-0427.html - http://www.redhat.com/support/errata/RHSA-2010-0428.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10691 - http://git.postgresql.org/gitweb?p=postgresql.git%3Ba=commit%3Bh=64b057e6823655fb6c5d1f24a28f236b94dd6c54 - http://secunia.com/advisories/39820 - http://www.securityfocus.com/bid/38619 - http://www.openwall.com/lists/oss-security/2010/03/16/10 - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - http://archives.postgresql.org/pgsql-bugs/2009-10/msg00310.php - http://archives.postgresql.org/pgsql-bugs/2009-10/msg00289.php - http://www.openwall.com/li
-bugs/2009-10/msg00310.php - http://archives.postgresql.org/pgsql-bugs/2009-10/msg00289.php - http://www.openwall.com/lists/oss-security/2010/03/09/2 - http://archives.postgresql.org/pgsql-bugs/2009-10/msg00287.php - http://www.redhat.com/support/errata/RHSA-2010-0429.html - https://bugzilla.redhat.com/show_bug.cgi?id=546621 - http://www.vupen.com/english/advisories/2010/1197
CVE ID: CVE-2010-0734 State: PUBLISHED Published: 2010-03-19T19:00:00 Last Updated: 2024-08-07T00:59:39.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: content_encoding.c in libcurl 7.10.5 through 7.19.7, when zlib is enabled, does not properly restrict the amount of callback data sent to an application that requests automatic decompression, which might allow remote attackers to cause a denial of service (application crash) or have unspecified other impact by sending crafted compressed data to an application that relies on the intended data-length limit. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Ju
itional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html - http://www.vupen.com/english/advisories/2010/0571 - http://www.vupen.com/english/advisories/2010/0602 - http://www.securityfocus.com/archive/1/514490/100/0/threaded - http://secunia.com/advisories/38843 - http://www.openwall.com/lists/oss-security/2010/03/09/1 - http://secunia.com/advisories/38981 - http://www.vupen.com/english/advisories/2010/1481 - http://www.ubuntu.com/usn/USN-1158-1 - http://curl.haxx.se/docs/adv_20100209.html - http://www.vupen.com/english/advisories/2010/0725 - http://www.debian.org/security/2010/dsa-2023 - http://www.redhat.com/supp
//www.vupen.com/english/advisories/2010/0725 - http://www.debian.org/security/2010/dsa-2023 - http://www.redhat.com/support/errata/RHSA-2010-0329.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10760 - http://support.apple.com/kb/HT4188 - https://bugzilla.redhat.com/show_bug.cgi?id=563220 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:062 - http://secunia.com/advisories/40220 - http://security.gentoo.org/glsa/glsa-201203-02.xml - http://lists.fedoraproject.org/pipermail/package-announce/2010-March/037143.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036744.html - http://secunia.com/advisories/48256 - h
tp://lists.fedoraproject.org/pipermail/package-announce/2010-March/036744.html - http://secunia.com/advisories/48256 - http://support.avaya.com/css/P8/documents/100081819 - http://www.openwall.com/lists/oss-security/2010/03/16/11 - http://secunia.com/advisories/39087 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - http://secunia.com/advisories/45047 - http://wiki.rpath.com/Advisories:rPSA-2010-0072 - http://curl.haxx.se/libcurl-contentencoding.patch - http://www.securityfocus.com/archive/1/516397/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6756 - http://secunia.com/advisories/39734 - http://curl.haxx.se/docs/securi
ch/definition/oval%3Aorg.mitre.oval%3Adef%3A6756 - http://secunia.com/advisories/39734 - http://curl.haxx.se/docs/security.html#20100209 - http://www.vupen.com/english/advisories/2010/0660 - http://www.openwall.com/lists/oss-security/2010/02/09/5
CVE ID: CVE-2010-0735 State: REJECTED Published: 2010-03-18T19:00:00Z Last Updated: 2024-09-17T03:49:13.876Z Description: No description available.
CVE ID: CVE-2010-0736 State: PUBLISHED Published: 2010-03-19T19:00:00Z Last Updated: 2024-09-17T00:26:26.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the view_queryform function in lib/viewvc.py in ViewVC before 1.0.10, and 1.1.x before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via "user-provided input." Additional Analyst Notes: - CVE Program Container: References: - http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2326 - http://www.openwall.com/lists/oss-security/2010/03/16/14 - http://www.openwall.com/lists/oss-security/2010/03/10/8 - http://viewvc.tigris.org/source/browse/viewvc/trun
/03/16/14 - http://www.openwall.com/lists/oss-security/2010/03/10/8 - http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?r1=2313&r2=2342&pathrev=HEAD
CVE ID: CVE-2010-0737 State: PUBLISHED Published: 2019-10-30T22:11:50 Last Updated: 2024-08-07T00:59:39.003Z Vendors: Red Hat Products: JBoss Problem Types: Other Description: A missing permission check was found in The CLI in JBoss Operations Network before 2.3.1 does not properly check permissions, which allows JBoss ON users to perform management tasks and configuration changes with the privileges of the administrator user. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-0737
CVE ID: CVE-2010-0738 State: PUBLISHED Published: 2010-04-28T22:00:00.000Z Last Updated: 2025-10-22T00:05:52.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://rhn.redhat.com/errata/RHSA-2010-0379.html - https://rhn.redhat.com/errata/RHSA-2010-0378.html -
t: References: - https://rhn.redhat.com/errata/RHSA-2010-0379.html - https://rhn.redhat.com/errata/RHSA-2010-0378.html - https://bugzilla.redhat.com/show_bug.cgi?id=574105 - https://rhn.redhat.com/errata/RHSA-2010-0376.html - http://securityreason.com/securityalert/8408 - https://rhn.redhat.com/errata/RHSA-2010-0377.html - http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=35 - http://www.vupen.com/english/advisories/2010/0992 - http://marc.info/?l=bugtraq&m=132129312609324&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58147 - http://marc.info/?l=bugtraq&m=132129312609324&w=2 - http://www.securityfocus.com/bid/39710 - http://secunia.com/advisorie
ttp://marc.info/?l=bugtraq&m=132129312609324&w=2 - http://www.securityfocus.com/bid/39710 - http://secunia.com/advisories/39563 - http://securitytracker.com/id?1023918
CVE ID: CVE-2010-0739 State: PUBLISHED Published: 2010-04-16T18:00:00 Last Updated: 2024-08-07T00:59:39.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the predospecial function in dospecial.c in dvips in (1) TeX Live and (2) teTeX might allow user-assisted remote attackers to execute arbitrary code via a crafted DVI file that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39500 - http://security.gentoo.org/glsa/glsa-201206-28.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aor
http://security.gentoo.org/glsa/glsa-201206-28.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11468 - http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041573.html - http://git.frugalware.org/gitweb/gitweb.cgi?p=frugalware-stable.git%3Ba=blob%3Bf=source/xapps-extra/tetex/texlive-CVE-2010-0739-int-overflow.patch - https://bugzilla.redhat.com/show_bug.cgi?id=572941 - http://www.ubuntu.com/usn/USN-937-1 - http://secunia.com/advisories/39390
CVE ID: CVE-2010-0740 State: PUBLISHED Published: 2010-03-26T18:00:00 Last Updated: 2024-08-07T00:59:39.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ssl3_get_record function in ssl/s3_pkt.c in OpenSSL 0.9.8f through 0.9.8m allows remote attackers to cause a denial of service (crash) via a malformed record in a TLS connection that triggers a NULL pointer dereference, related to the minor version number. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42724 - http://support.apple.com/kb/HT4723 - http://marc.info/?l=bugtraq&m=127557640302499&w=2 - http://l
com/advisories/42724 - http://support.apple.com/kb/HT4723 - http://marc.info/?l=bugtraq&m=127557640302499&w=2 - http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html - http://www.openssl.org/news/secadv_20100324.txt - https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html - http://www.vupen.com/english/advisories/2010/0710 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html - http://www.vupen.com/english/advisories/2010/0839 - http://marc.info/?l=bugtraq&m=127557640302499&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:076 - http://marc.info/?l=bugtraq&m=127128920008563&w=2 - https://lists.balabit.com/pipermai
/advisories?name=MDVSA-2010:076 - http://marc.info/?l=bugtraq&m=127128920008563&w=2 - https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html - http://www.securitytracker.com/id?1023748 - http://secunia.com/advisories/39932 - http://www.vupen.com/english/advisories/2010/0933 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - http://marc.info/?l=bugtraq&m=127128920008563&w=2 - https://kb.bluecoat.com/index?page=content&id=SA50 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11731 - http://www.securityfocus.com/archive/1/516397/100/0/threaded - http://secunia.com/advisories/43311 - http://www.vupen.com/english/advi
urityfocus.com/archive/1/516397/100/0/threaded - http://secunia.com/advisories/43311 - http://www.vupen.com/english/advisories/2010/1216 - http://secunia.com/advisories/42733 - http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038587.html - http://aix.software.ibm.com/aix/efixes/security/openssl_advisory.asc