Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-4222 State: PUBLISHED Published: 2013-09-30T20:00:00 Last Updated: 2024-08-06T16:38:01.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Identity (Keystone) Folsom, Grizzly 2013.1.3 and earlier, and Havana before havana-3 does not properly revoke user tokens when a tenant is disabled, which allows remote authenticated users to retain access via the token. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1524.html - http://www.ubuntu.com/usn/USN-2002-1 - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116489.html - https://bugs.launchpad.net/ossn/+bug/1179955
CVE ID: CVE-2013-4223 State: PUBLISHED Published: 2014-05-23T14:00:00 Last Updated: 2024-08-06T16:38:01.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Gentoo Nullmailer package before 1.11-r2 uses world-readable permissions for /etc/nullmailer/remotes, which allows local users to obtain SMTP authentication credentials by reading the file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2013/q3/337 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86384 - http://seclists.org/oss-sec/2013/q3/339 - http://www.securityfocus.com/bid/61743 - http://osvdb.org/96177 - https://bugs.gentoo.org/show_bug.cgi?id=480376
CVE ID: CVE-2013-4224 State: REJECTED Published: 2019-11-25T16:32:30 Last Updated: 2019-11-25T16:32:30 Description: No description available.
CVE ID: CVE-2013-4225 State: PUBLISHED Published: 2020-02-11T20:19:56 Last Updated: 2024-08-06T16:38:01.575Z Vendors: RESTful Web Services Products: RESTful Web Services Problem Types: Insecure Permissions Description: The RESTful Web Services (restws) module 7.x-1.x before 7.x-1.4 and 7.x-2.x before 7.x-2.1 for Drupal does not properly restrict access to entity write operations, which makes it easier for remote authenticated users with the "access resource node" and "create page content" permissions (or equivalents) to conduct cross-site scripting (XSS) or execute arbitrary PHP code via a crafted text field. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org
y PHP code via a crafted text field. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/2059603 - https://drupal.org/node/2059591 - https://drupal.org/node/2059593 - http://www.openwall.com/lists/oss-security/2013/08/10/1
CVE ID: CVE-2013-4226 State: PUBLISHED Published: 2020-02-18T18:19:48 Last Updated: 2024-08-06T16:38:01.761Z Vendors: n/a Products: Authenticated User Page Caching (Authcache) module Problem Types: Path Disclosure Description: The Authenticated User Page Caching (Authcache) module 7.x-1.x before 7.x-1.5 for Drupal does not properly restrict access to cached pages, which allows remote attackers with the same role-combination as the superuser to obtain sensitive information via the cached pages of the superuser. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/2059589 - http://www.openwall.com/lists/oss-security/2013/08/10/1 - https://drupal.org/node/205
https://drupal.org/node/2059589 - http://www.openwall.com/lists/oss-security/2013/08/10/1 - https://drupal.org/node/2058165
CVE ID: CVE-2013-4227 State: PUBLISHED Published: 2020-02-18T14:08:31 Last Updated: 2024-08-06T16:38:01.670Z Vendors: Mozilla Products: Persona Problem Types: Cross-Site Request Forgery Description: Cross-site request forgery (CSRF) vulnerability in the persona_xsrf_token function in persona.module in the Mozilla Persona module 7.x-1.x before 7.x-1.11 for Drupal allows remote attackers to hijack the authentication of aribitrary users via a security token that is not a string data type. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/2059599 - http://drupalcode.org/project/persona.git/commitdiff/fe0f9bb - http://www.openwall.com/lists/oss-security/2013
2059599 - http://drupalcode.org/project/persona.git/commitdiff/fe0f9bb - http://www.openwall.com/lists/oss-security/2013/08/10/1 - https://drupal.org/node/2058655
CVE ID: CVE-2013-4228 State: PUBLISHED Published: 2020-02-18T18:13:23 Last Updated: 2024-08-06T16:38:01.683Z Vendors: n/a Products: Organic Groups (OG) module Problem Types: Insecure Permissions Description: The OG access fields (visibility fields) implementation in Organic Groups (OG) module 7.x-2.x before 7.x-2.3 for Drupal does not properly restrict access to private groups, which allows remote authenticated users to guess node IDs, subscribe to, and read the content of arbitrary private groups via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/2059765 - http://www.openwall.com/lists/oss-security/2013/08/10/1 - http://www.secu
eferences: - https://drupal.org/node/2059765 - http://www.openwall.com/lists/oss-security/2013/08/10/1 - http://www.securityfocus.com/bid/61708 - https://drupal.org/node/2059755 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86328
CVE ID: CVE-2013-4229 State: PUBLISHED Published: 2013-08-21T14:00:00 Last Updated: 2024-08-06T16:38:01.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Monster Menus module 7.x-1.x before 7.x-1.12 for Drupal allows remote authenticated users with permissions to add pages to inject arbitrary web script or HTML via a title in the page settings. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61710 - https://drupal.org/node/2059823 - https://drupal.org/node/2059789 - http://www.openwall.com/lists/oss-security/2013/08/10/1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86327
- http://www.openwall.com/lists/oss-security/2013/08/10/1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86327 - http://drupalcode.org/project/monster_menus.git/blobdiff/4841dcb4e36bdc74efe4ae2459637029df929940..4adcb6b:/mm_static.inc - http://secunia.com/advisories/54391
CVE ID: CVE-2013-4230 State: PUBLISHED Published: 2013-08-21T14:00:00 Last Updated: 2024-08-06T16:38:01.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mm_webform submodule in the Monster Menus module 6.x-6.x before 6.x-6.61 and 7.x-1.x before 7.x-1.13 for Drupal does not properly restrict access to webform submissions, which allows remote authenticated users with the "Who can read data submitted to this webform" permission to delete arbitrary submissions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/2059807 - https://drupal.org/node/2059823 - http://www.securityfocus.com/bid/61711 - http://www.openwall.c
upal.org/node/2059807 - https://drupal.org/node/2059823 - http://www.securityfocus.com/bid/61711 - http://www.openwall.com/lists/oss-security/2013/08/10/1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86326 - https://drupal.org/node/2059805 - http://secunia.com/advisories/54391
CVE ID: CVE-2013-4231 State: PUBLISHED Published: 2014-01-19T15:00:00 Last Updated: 2024-08-06T16:38:01.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in libtiff before 4.0.3 allow remote attackers to cause a denial of service (out-of-bounds write) via a crafted (1) extension block in a GIF image or (2) GIF raster image to tools/gif2tiff.c or (3) a long filename for a TIFF image to tools/rgb2ycbcr.c. NOTE: vectors 1 and 3 are disputed by Red Hat, which states that the input cannot exceed the allocated buffer size. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.maptools.org/show_bug.cgi?id=2450 - http://rhn.redhat.co
t Notes: - CVE Program Container: References: - http://bugzilla.maptools.org/show_bug.cgi?id=2450 - http://rhn.redhat.com/errata/RHSA-2014-0223.html - http://www.debian.org/security/2013/dsa-2744 - http://secunia.com/advisories/54543 - https://bugzilla.redhat.com/show_bug.cgi?id=995965 - http://www.asmail.be/msg0055359936.html - http://secunia.com/advisories/54628 - http://www.openwall.com/lists/oss-security/2013/08/10/2 - http://www.securityfocus.com/bid/61695
CVE ID: CVE-2013-4232 State: PUBLISHED Published: 2013-09-10T19:00:00 Last Updated: 2024-08-06T16:38:01.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the t2p_readwrite_pdf_image function in tools/tiff2pdf.c in libtiff 4.0.3 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted TIFF image. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.maptools.org/show_bug.cgi?id=2449 - http://rhn.redhat.com/errata/RHSA-2014-0223.html - https://bugzilla.redhat.com/show_bug.cgi?id=995975 - http://www.debian.org/security/2013/dsa-2744 - http://secunia.com/advisories/54543
.redhat.com/show_bug.cgi?id=995975 - http://www.debian.org/security/2013/dsa-2744 - http://secunia.com/advisories/54543 - http://www.asmail.be/msg0055359936.html - http://secunia.com/advisories/54628 - http://www.openwall.com/lists/oss-security/2013/08/10/2
CVE ID: CVE-2013-4233 State: PUBLISHED Published: 2013-09-16T19:00:00Z Last Updated: 2024-09-17T00:16:36.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the abc_set_parts function in load_abc.cpp in libmodplug 0.8.8.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted P header in an ABC file, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2013/dsa-2751 - http://blog.scrt.ch/2013/07/24/vlc-abc-parsing-seems-to-be-a-ctf-challenge/ - http://secunia.com/advisories/54388 - http://www.openwall.com/lists/oss
4/vlc-abc-parsing-seems-to-be-a-ctf-challenge/ - http://secunia.com/advisories/54388 - http://www.openwall.com/lists/oss-security/2013/08/10/3 - http://secunia.com/advisories/54695
CVE ID: CVE-2013-4234 State: PUBLISHED Published: 2013-09-16T19:00:00 Last Updated: 2024-08-06T16:38:01.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in the (1) abc_MIDI_drum and (2) abc_MIDI_gchord functions in load_abc.cpp in libmodplug 0.8.8.4 and earlier allow remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via a crafted ABC. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2013/dsa-2751 - http://blog.scrt.ch/2013/07/24/vlc-abc-parsing-seems-to-be-a-ctf-challenge/ - http://secunia.com/advisories/54388 - http://www.openwall.c
ch/2013/07/24/vlc-abc-parsing-seems-to-be-a-ctf-challenge/ - http://secunia.com/advisories/54388 - http://www.openwall.com/lists/oss-security/2013/08/10/3 - http://www.securityfocus.com/bid/61714 - http://secunia.com/advisories/54695
CVE ID: CVE-2013-4235 State: PUBLISHED Published: 2019-12-03T00:00:00 Last Updated: 2024-08-06T16:38:01.619Z Vendors: shadow Products: shadow Problem Types: race conditions by copying and removing directory trees Description: shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-4235 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4235 - https://access.redhat.com/security/cve/cve-2013-4235 - https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E - https://s
apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E - https://security.gentoo.org/glsa/202210-26
CVE ID: CVE-2013-4236 State: PUBLISHED Published: 2013-08-19T23:00:00Z Last Updated: 2024-08-06T16:38:01.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become "unavailable to the managment server" via invalid XML characters in a guest agent response. NOTE: this issue is due to an incomplete fix for CVE-2013-0167. Additional Analyst Notes: - CVE Program Container: References: - http://gerrit.ovirt.org/gitweb?p=vdsm.git%3Ba=commit%3Bh=5fe1615b7949999fc9abd896bde63bf24f8431d6 - http://rhn.redhat.com/errata/RHSA-2013-1155.html - https://bugzilla.redhat.com/show_bug.cgi?id=99616
6bde63bf24f8431d6 - http://rhn.redhat.com/errata/RHSA-2013-1155.html - https://bugzilla.redhat.com/show_bug.cgi?id=996166
CVE ID: CVE-2013-4237 State: PUBLISHED Published: 2013-10-09T22:00:00 Last Updated: 2024-08-06T16:38:01.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: sysdeps/posix/readdir_r.c in the GNU C Library (aka glibc or libc6) 2.18 and earlier allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a crafted (1) NTFS or (2) CIFS image. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55113 - http://www.openwall.com/lists/oss-security/2013/08/12/8 - http://www.ubuntu.com/usn/USN-1991-1 - https://bugzilla.redhat.com/show_bug.cgi?id=995839 - https://security.gent
12/8 - http://www.ubuntu.com/usn/USN-1991-1 - https://bugzilla.redhat.com/show_bug.cgi?id=995839 - https://security.gentoo.org/glsa/201503-04 - https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Ba=commitdiff%3Bh=91ce40854d0b7f865cf5024ef95a8026b76096f3 - http://www.securityfocus.com/bid/61729 - https://sourceware.org/bugzilla/show_bug.cgi?id=14699 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:283
CVE ID: CVE-2013-4238 State: PUBLISHED Published: 2013-08-18T01:00:00 Last Updated: 2024-08-06T16:38:01.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ssl.match_hostname function in the SSL module in Python 2.6 through 3.4 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1582.html - http://www.vmware.com/security/advisor
ogram Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1582.html - http://www.vmware.com/security/advisories/VMSA-2014-0012.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00043.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00029.html - http://www.securityfocus.com/archive/1/534161/100/0/threaded - http://www.debian.org/security/2014/dsa-2880 - http://www.ubuntu.com/usn/USN-1982-1 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00026.html - http://seclists.org/fulldisclosure/2014/Dec/23 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00042.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00027.html - https://bugzilla.redh
updates/2013-09/msg00042.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00027.html - https://bugzilla.redhat.com/show_bug.cgi?id=996381 - http://bugs.python.org/issue18709 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00028.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html
CVE ID: CVE-2013-4239 State: PUBLISHED Published: 2013-09-30T21:00:00Z Last Updated: 2024-08-06T16:38:01.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xenDaemonListDefinedDomains function in xen/xend_internal.c in libvirt 1.1.1 allows remote authenticated users to cause a denial of service (memory corruption and crash) via vectors involving the virConnectListDefinedDomains API function. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/08/12/12 - http://libvirt.org/news.html - https://bugzilla.redhat.com/show_bug.cgi?id=996241 - http://libvirt.org/git/?p=libvirt.git%3Ba=commitdiff%3Bh=0e671a16
CVE ID: CVE-2013-4240 State: PUBLISHED Published: 2014-04-02T14:00:00 Last Updated: 2024-08-06T16:38:01.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the HMS Testimonials plugin before 2.0.11 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) add new testimonials via the hms-testimonials-addnew page, (2) add new groups via the hms-testimonials-addnewgroup page, (3) change default settings via the hms-testimonials-settings page, (4) change advanced settings via the hms-testimonials-settings-advanced page, (5) change custom fields settings via the hms-testimoni
vanced settings via the hms-testimonials-settings-advanced page, (5) change custom fields settings via the hms-testimonials-settings-fields page, or (6) change template settings via the hms-testimonials-templates-new page to wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2013/q3/361 - http://seclists.org/oss-sec/2013/q3/345 - http://seclists.org/fulldisclosure/2013/Aug/98 - http://wordpress.org/plugins/hms-testimonials/changelog - http://seclists.org/fulldisclosure/2013/Aug/96 - http://osvdb.org/96107
CVE ID: CVE-2013-4241 State: PUBLISHED Published: 2020-01-30T20:26:53 Last Updated: 2024-08-06T16:38:01.765Z Vendors: HitMyServer Products: HMS Testimonials Problem Types: Cross-Site Scripting Description: Multiple cross-site scripting (XSS) vulnerabilities in the HMS Testimonials plugin before 2.0.11 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) image, (3) url, or (4) testimonial parameter to the Testimonial form (hms-testimonials-addnew page); (5) date_format parameter to the Settings - Default form (hms-testimonials-settings page); (6) name parameter in a Save action to the Settings - Custom Fields form (hms-testimonials-settings-fields
tings page); (6) name parameter in a Save action to the Settings - Custom Fields form (hms-testimonials-settings-fields page); or (7) name parameter in a Save action to the Settings - Template form (hms-testimonials-templates-new page). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2013/Aug/96 - http://seclists.org/fulldisclosure/2013/Aug/98 - http://seclists.org/oss-sec/2013/q3/345 - http://seclists.org/oss-sec/2013/q3/361 - https://wordpress.org/plugins/hms-testimonials/#developers
CVE ID: CVE-2013-4242 State: PUBLISHED Published: 2013-08-19T23:00:00 Last Updated: 2024-08-06T16:38:01.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: GnuPG before 1.4.14, and Libgcrypt before 1.5.3 as used in GnuPG 2.0.x and possibly other products, allows local users to obtain private RSA keys via a cache side-channel attack involving the L3 cache, aka Flush+Reload. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://www.debian.org/security/2013/dsa-2731 - http://secunia.com/advisories/54332 - http://secunia.com/advisories/54321 - http://secunia.com/advisories/54375 - ht
1 - http://secunia.com/advisories/54332 - http://secunia.com/advisories/54321 - http://secunia.com/advisories/54375 - http://lists.opensuse.org/opensuse-updates/2013-08/msg00003.html - http://www.securityfocus.com/bid/61464 - http://www.ubuntu.com/usn/USN-1923-1 - http://eprint.iacr.org/2013/448 - http://lists.gnupg.org/pipermail/gnupg-announce/2013q3/000330.html - http://www.kb.cert.org/vuls/id/976534 - http://www.debian.org/security/2013/dsa-2730 - http://rhn.redhat.com/errata/RHSA-2013-1457.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=717880 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://secunia.com/advisories/54318
CVE ID: CVE-2013-4243 State: PUBLISHED Published: 2013-09-10T19:00:00 Last Updated: 2024-08-06T16:38:01.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the readgifimage function in the gif2tiff tool in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted height and width values in a GIF image. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.maptools.org/show_bug.cgi?id=2451 - https://bugzilla.redhat.com/show_bug.cgi?id=996052 - http://www.securityfocus.com/bid/62082 - http://rhn.redhat.com/errata/RHSA-2014-0223.html - https://secur
gi?id=996052 - http://www.securityfocus.com/bid/62082 - http://rhn.redhat.com/errata/RHSA-2014-0223.html - https://security.gentoo.org/glsa/201701-16 - http://www.debian.org/security/2013/dsa-2744 - http://secunia.com/advisories/54543 - http://secunia.com/advisories/54628
CVE ID: CVE-2013-4244 State: PUBLISHED Published: 2013-09-28T19:00:00 Last Updated: 2024-08-06T16:38:01.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LZW decompressor in the gif2tiff tool in libtiff 4.0.3 and earlier allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a crafted GIF image. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0223.html - https://github.com/vadz/libtiff/commit/ce6841d9e41d621ba23cf18b190ee6a23b2cc833 - http://bugzilla.maptools.org/show_bug.cgi?id=2452 - https://bugzilla.redhat.com/show_bug.cgi?id=996468
CVE ID: CVE-2013-4245 State: PUBLISHED Published: 2019-12-11T13:30:31 Last Updated: 2024-08-06T16:38:01.570Z Vendors: Orca Products: Orca Problem Types: code execution due to insecure CWD Python module load Description: Orca has arbitrary code execution due to insecure Python module load Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-4245 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4245 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-4245 - https://access.redhat.com/security/cve/cve-2013-4245
CVE ID: CVE-2013-4246 State: PUBLISHED Published: 2017-10-30T14:00:00 Last Updated: 2024-08-06T16:38:01.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: libsvn_fs_fs/fs_fs.c in Apache Subversion 1.8.x before 1.8.2 might allow remote authenticated users with commit access to corrupt FSFS repositories and cause a denial of service or obtain sensitive information by editing packed revision properties. Additional Analyst Notes: - CVE Program Container: References: - https://subversion.apache.org/security/CVE-2013-4246-advisory.txt - http://www.securityfocus.com/bid/101620
CVE ID: CVE-2013-4247 State: PUBLISHED Published: 2013-08-25T01:00:00Z Last Updated: 2024-08-06T16:38:01.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the build_unc_path_to_root function in fs/cifs/connect.c in the Linux kernel before 3.9.6 allows remote attackers to cause a denial of service (memory corruption and system crash) via a DFS share mount operation that triggers use of an unexpected DFS referral name length. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/1fc29bacedeabb278080e31bb9c1ecb49f143c3b - https://bugzilla.redhat.com/show_bug.cgi?id=998401 - http://www.kernel.org/pub/linux/kern
bb278080e31bb9c1ecb49f143c3b - https://bugzilla.redhat.com/show_bug.cgi?id=998401 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.9.6 - http://www.openwall.com/lists/oss-security/2013/08/14/10 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1fc29bacedeabb278080e31bb9c1ecb49f143c3b