deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-4529
Published: 2012-01-08
Description: Multiple buffer overflows in Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allow remote attackers to execute arbitrary code via a long serialid field in an _licensekey command, as demonstrated by the (1) check_licensekey or (2) read_licensekey command.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://aluigi.altervista.org/adv/almsrvx_1-adv.txt; http://support.automation.siemens.com/WW/llisapi.dll/57252401?func=ll&objId=57252401&objAction=csView&nodeid0=17323948&lang=en&siteid=cseus&aktprim=0&extranet=standard&viewreg=WW&load=content; http://support.automation.siemens.com/WW/view/en/114358
CVE: CVE-2011-4530
Published: 2012-01-08
Description: Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 does not properly copy fields obtained from clients, which allows remote attackers to cause a denial of service (exception and daemon crash) via long fields, as demonstrated by fields to the (1) open_session->workstation->NAME or (2) grant->VERSION function.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://aluigi.altervista.org/adv/almsrvx_1-adv.txt; http://support.automation.siemens.com/WW/llisapi.dll/57252401?func=ll&objId=57252401&objAction=csView&nodeid0=17323948&lang=en&siteid=cseus&aktprim=0&extranet=standard&viewreg=WW&load=content; http://support.automation.siemens.com/WW/view/en/114358
CVE: CVE-2011-4531
Published: 2012-01-08
Description: Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted content in a (1) get_target_ocx_param or (2) send_target_ocx_param command.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://aluigi.altervista.org/adv/almsrvx_1-adv.txt; http://support.automation.siemens.com/WW/llisapi.dll/57252401?func=ll&objId=57252401&objAction=csView&nodeid0=17323948&lang=en&siteid=cseus&aktprim=0&extranet=standard&viewreg=WW&load=content; http://support.automation.siemens.com/WW/view/en/114358
CVE: CVE-2011-4532
Published: 2012-01-08
Description: Absolute path traversal vulnerability in the ALMListView.ALMListCtrl ActiveX control in almaxcx.dll in the graphical user interface in Siemens Automation License Manager (ALM) 2.0 through 5.1+SP1+Upd2 allows remote attackers to overwrite arbitrary files via the Save method.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://aluigi.altervista.org/adv/almsrvx_1-adv.txt; http://support.automation.siemens.com/WW/llisapi.dll/57252401?func=ll&objId=57252401&objAction=csView&nodeid0=17323948&lang=en&siteid=cseus&aktprim=0&extranet=standard&viewreg=WW&load=content; http://support.automation.siemens.com/WW/view/en/114358
CVE: CVE-2011-4785
Published: 2012-01-10
Description: Directory traversal vulnerability in the HP-ChaiSOE/1.0 web server on the HP LaserJet P3015 printer with firmware before 07.080.3, LaserJet 4650 printer with firmware 07.006.0, and LaserJet 2430 printer with firmware 08.113.0_I35128 allows remote attackers to read arbitrary files via unspecified vectors, a different vulnerability than CVE-2008-4419.
CVSS Score: 7.8 (HIGH)
CWE: CWE-200
References: http://archives.neohapsis.com/archives/fulldisclosure/2012-01/0116.html; http://osvdb.org/78224; http://secunia.com/advisories/47457
CVE: CVE-2011-4370
Published: 2012-01-10
Description: Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-4372 and CVE-2011-4373.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.adobe.com/support/security/bulletins/apsb12-01.html; http://www.securityfocus.com/bid/51348; http://www.securitytracker.com/id?1026496
CVE: CVE-2011-4371
Published: 2012-01-10
Description: Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.adobe.com/support/security/bulletins/apsb12-01.html; http://www.securityfocus.com/bid/51351; http://www.securitytracker.com/id?1026496
CVE: CVE-2011-4372
Published: 2012-01-10
Description: Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-4370 and CVE-2011-4373.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.adobe.com/support/security/bulletins/apsb12-01.html; http://www.securityfocus.com/bid/51349; http://www.securitytracker.com/id?1026496
CVE: CVE-2011-4373
Published: 2012-01-10
Description: Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-4370 and CVE-2011-4372.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.adobe.com/support/security/bulletins/apsb12-01.html; http://www.securityfocus.com/bid/51350; http://www.securitytracker.com/id?1026496
CVE: CVE-2012-0001
Published: 2012-01-10
Description: The kernel in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly load structured exception handling tables, which allows context-dependent attackers to bypass the SafeSEH security feature by leveraging a Visual C++ .NET 2003 application, aka "Windows Kernel SafeSEH Bypass Vulnerability."
CVSS Score: 9.3 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html; http://secunia.com/advisories/47356; http://www.securityfocus.com/bid/51296
CVE: CVE-2012-0003
Published: 2012-01-10
Description: Unspecified vulnerability in winmm.dll in Windows Multimedia Library in Windows Media Player (WMP) in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows remote attackers to execute arbitrary code via a crafted MIDI file, aka "MIDI Remote Code Execution Vulnerability."
CVSS Score: 8.1 (HIGH)
References: http://secunia.com/advisories/47485; http://www.securityfocus.com/bid/51292; http://www.securitytracker.com/id?1026492
CVE: CVE-2012-0004
Published: 2012-01-10
Description: Unspecified vulnerability in DirectShow in DirectX in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted media file, related to Quartz.dll, Qdvd.dll, closed captioning, and the Line21 DirectShow filter, aka "DirectShow Remote Code Execution Vulnerability."
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/47485; http://www.securityfocus.com/bid/51295; http://www.securitytracker.com/id?1026492
CVE: CVE-2012-0005
Published: 2012-01-10
Description: The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2, when a Chinese, Japanese, or Korean system locale is used, can access uninitialized memory during the processing of Unicode characters, which allows local users to gain privileges via a crafted application, aka "CSRSS Elevation of Privilege Vulnerability."
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/47479; http://www.securityfocus.com/bid/51270; http://www.securitytracker.com/id?1026495
CVE: CVE-2012-0007
Published: 2012-01-10
Description: The Microsoft Anti-Cross Site Scripting (AntiXSS) Library 3.x and 4.0 does not properly evaluate characters after the detection of a Cascading Style Sheets (CSS) escaped character, which allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML input, aka "AntiXSS Library Bypass Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/47483; http://secunia.com/advisories/47516; http://www.securityfocus.com/bid/51291
CVE: CVE-2012-0009
Published: 2012-01-10
Description: Untrusted search path vulnerability in the Windows Object Packager configuration in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a Trojan horse executable file in the current working directory, as demonstrated by a directory that contains a file with an embedded packaged object, aka "Object Packager Insecure Executable Launching Vulnerability."
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/45189; http://www.securityfocus.com/bid/51297; http://www.securitytracker.com/id?1026494
CVE: CVE-2012-0013
Published: 2012-01-10
Description: Incomplete blacklist vulnerability in the Windows Packager configuration in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted ClickOnce application in a Microsoft Office document, related to .application files, aka "Assembly Execution Vulnerability."
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/47480; http://www.securityfocus.com/bid/51284; http://www.securitytracker.com/id?1026497
CVE: CVE-2011-5058
Published: 2012-01-10
Description: The CmbWebserver.dll module of the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to create arbitrary directories under the web root by specifying a non-existent directory using \ (backslash) characters in an HTTP GET request.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-264
References: http://aluigi.altervista.org/adv/codesys_1-adv.txt; http://secunia.com/advisories/47018; http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-336-01A.pdf
CVE: CVE-2011-5059
Published: 2012-01-10
Description: Stack-based buffer overflow in Final Draft 8 before 8.02 allows remote attackers to execute arbitrary code via a crafted SmartType element, a different vulnerability than CVE-2011-5002.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/47044; http://secunia.com/advisories/47044
CVE: CVE-2012-0695
Published: 2012-01-12
Description: Multiple unspecified vulnerabilities in Google Chrome before 17.0.963.27 on the Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms have unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://googlechromereleases.blogspot.com/2012/01/beta-channel-update-for-chromebooks.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14268; http://googlechromereleases.blogspot.com/2012/01/beta-channel-update-for-chromebooks.html
CVE: CVE-2011-4786
Published: 2012-01-12
Description: A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-2404 and CVE-2011-4787.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://archives.neohapsis.com/archives/bugtraq/2012-01/0078.html; http://archives.neohapsis.com/archives/bugtraq/2012-01/0078.html
CVE: CVE-2011-4787
Published: 2012-01-12
Description: A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-2404 and CVE-2011-4786.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://archives.neohapsis.com/archives/bugtraq/2012-01/0078.html; http://archives.neohapsis.com/archives/bugtraq/2012-01/0078.html
CVE: CVE-2011-4788
Published: 2012-01-13
Description: Absolute path traversal vulnerability in the web interface on HP StorageWorks P2000 G3 MSA array systems allows remote attackers to read arbitrary files via a pathname in the URI.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: http://archives.neohapsis.com/archives/bugtraq/2012-01/0088.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1841&w=2; http://zerodayinitiative.com/advisories/ZDI-12-015/
CVE: CVE-2011-4789
Published: 2012-01-13
Description: Stack-based buffer overflow in magentservice.exe in the server in HP LoadRunner 11.00 before patch 4 allows remote attackers to execute arbitrary code via a crafted size value in a packet.  NOTE: it was originally reported that the affected product is HP Diagnostics Server, but HP states that "the vulnerable product is actually HP LoadRunner."
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03216705; http://osvdb.org/78309; http://www.securityfocus.com/bid/51398
CVE: CVE-2011-4925
Published: 2012-01-13
Description: Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) before 2.5.9, when munge authentication is used, allows remote authenticated users to impersonate arbitrary user accounts via unspecified vectors.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-264
References: http://openwall.com/lists/oss-security/2012/01/05/1; http://openwall.com/lists/oss-security/2012/01/05/9; http://secunia.com/advisories/47381
CVE: CVE-2012-0309
Published: 2012-01-13
Description: Cross-site scripting (XSS) vulnerability in Cogent DataHub 7.1.2 and earlier, Cascade DataHub 6.4.20 and earlier, and OPC DataHub 6.4.20 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN12983784/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2012-000001; http://secunia.com/advisories/47496
CVE: CVE-2012-0310
Published: 2012-01-13
Description: CRLF injection vulnerability in Cogent DataHub 7.1.2 and earlier, Cascade DataHub 6.4.20 and earlier, and OPC DataHub 6.4.20 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-94
References: http://jvn.jp/en/jp/JVN63249231/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2012-000002; http://secunia.com/advisories/47496
CVE: CVE-2012-0696
Published: 2012-01-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in the Executive Viewer (EV) in IBM Cognos TM1 before 9.5 FP1 allow remote attackers to inject arbitrary web script or HTML via unspecified requests to (1) aspnet_client or (2) evserver/createcontrol.js.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/47487; http://securitytracker.com/id?1026491; http://www-01.ibm.com/support/docview.wss?uid=swg1PM26682
CVE: CVE-2012-0697
Published: 2012-01-13
Description: HP StorageWorks P2000 G3 MSA array systems have a default account, which makes it easier for remote attackers to perform administrative tasks via unspecified vectors, a different vulnerability than CVE-2011-4788.
CVSS Score: 10.0 (HIGH)
CWE: CWE-22
References: http://archives.neohapsis.com/archives/bugtraq/2012-01/0088.html; http://zerodayinitiative.com/advisories/ZDI-12-015/; https://exchange.xforce.ibmcloud.com/vulnerabilities/72372
CVE: CVE-2011-2776
Published: 2012-01-13
Description: Buffer overflow in the Error function in super.c in Super 3.30.0 might allow local users to execute arbitrary code via vectors related to syslog logging.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-119
References: http://osvdb.org/78213; http://secunia.com/advisories/47430; http://secunia.com/advisories/47514
CVE: CVE-2011-2939
Published: 2012-01-13
Description: Off-by-one error in the decode_xs function in Unicode/Unicode.xs in the Encode module before 2.44, as used in Perl before 5.15.6, might allow context-dependent attackers to cause a denial of service (memory corruption) via a crafted Unicode string, which triggers a heap-based buffer overflow.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-189
References: http://cpansearch.perl.org/src/FLORA/perl-5.14.2/pod/perldelta.pod; http://perl5.git.perl.org/perl.git/commitdiff/e46d973584785af1f445c4dedbee4243419cb860#patch5; http://search.cpan.org/~flora/perl-5.14.2/pod/perldelta.pod#Encode_decode_xs_n-byte_heap-overflow_%28CVE-2011-2939%29
CVE: CVE-2011-3597
Published: 2012-01-13
Description: Eval injection vulnerability in the Digest module before 1.17 for Perl allows context-dependent attackers to execute arbitrary commands via the new constructor.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://aix.software.ibm.com/aix/efixes/security/perl_advisory2.asc; http://cpansearch.perl.org/src/GAAS/Digest-1.17/Changes; http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
CVE: CVE-2011-4057
Published: 2012-01-13
Description: Wibu-Systems AG CodeMeter Runtime 4.30c, 4.10b, and possibly other versions before 4.40 allows remote attackers to cause a denial of service (CodeMeter.exe crash) via certain crafted packets to TCP port 22350.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://jvn.jp/en/jp/JVN78901873/index.html; http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-000003.html; http://osvdb.org/78223
CVE: CVE-2011-4114
Published: 2012-01-13
Description: The par_mktmpdir function in the PAR::Packer module before 1.012 for Perl creates temporary files in a directory with a predictable name without verifying ownership and permissions of this directory, which allows local users to overwrite files when another user extracts a PAR packed program.  NOTE: a similar vulnerability was reported for PAR, but this has been assigned a different CVE identifier.
CVSS Score: 3.3 (LOW)
CWE: CWE-264
References: http://lists.fedoraproject.org/pipermail/package-announce/2011-December/071091.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-December/071099.html; http://www.openwall.com/lists/oss-security/2011/11/04/2
CVE: CVE-2012-0030
Published: 2012-01-13
Description: Nova 2011.3 and Essex, when using the OpenStack API, allows remote authenticated users to bypass access restrictions for tenants of other users via an OSAPI request with a modified project_id URI parameter.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/47543; http://www.securityfocus.com/bid/51370; http://www.ubuntu.com/usn/USN-1326-1
CVE: CVE-2011-5060
Published: 2012-01-13
Description: The par_mktmpdir function in the PAR module before 1.003 for Perl creates temporary files in a directory with a predictable name without verifying ownership and permissions of this directory, which allows local users to overwrite files when another user extracts a PAR packed program, a different vulnerability in a different package than CVE-2011-4114.
CVSS Score: 3.3 (LOW)
CWE: CWE-264
References: http://cpansearch.perl.org/src/RSCHUPP/PAR-1.003/ChangeLog; https://bugzilla.redhat.com/show_bug.cgi?id=753955; https://exchange.xforce.ibmcloud.com/vulnerabilities/72435
CVE: CVE-2011-5061
Published: 2012-01-14
Description: functions.php in WHMCompleteSolution (WHMCS) 4.0.x through 5.0.x allows remote attackers to trigger arbitrary code execution in the Smarty templating system by submitting a crafted ticket, related to improper handling of characters in the subject field.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://forum.whmcs.com/showthread.php?t=43462; http://www.webhostingtalk.com/showpost.php?p=7848685&postcount=35; http://forum.whmcs.com/showthread.php?t=43462
CVE: CVE-2012-0693
Published: 2012-01-14
Description: submitticket.php in WHMCompleteSolution (WHMCS) 5.03 allows remote attackers to inject arbitrary code into a subject field via crafted ticket data, a different vulnerability than CVE-2011-5061. NOTE: the vendor disputes this issue, noting that some of the details overlap CVE-2011-5061, but that it "says it affects V5.0.3, and the submitticket.php file, both of which are wrong.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-94
References: http://www.oscommerceuniversity.com/lounge/index.php/board%2C23.0.html; http://www.oscommerceuniversity.com/lounge/index.php/topic%2C1209.0.html; http://www.oscommerceuniversity.com/lounge/index.php/board%2C23.0.html
CVE: CVE-2012-0039
Published: 2012-01-14
Description: GLib 2.31.8 and earlier, when the g_str_hash function is used, computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table. NOTE: this issue may be disputed by the vendor; the existence of the g_str_hash function is not a vulnerability in the library, because callers of g_hash_table_new and g_hash_table_new_full can specify an arbitrary hash function that is appropriate for the application.
CVSS Score: 7.5 (HIGH)
CWE: CWE-310
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=655044; http://mail.gnome.org/archives/gtk-devel-list/2003-May/msg00111.html; http://openwall.com/lists/oss-security/2012/01/10/12
CVE: CVE-2011-1184
Published: 2012-01-14
Description: The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not have the expected countermeasures against replay attacks, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests, related to lack of checking of nonce (aka server nonce) and nc (aka nonce-count or client nonce count) values.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00006.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2771&w=2
CVE: CVE-2011-5062
Published: 2012-01-14
Description: The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check qop values, which might allow remote attackers to bypass intended integrity-protection requirements via a qop=auth value, a different vulnerability than CVE-2011-1184.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00006.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2337&w=2
CVE: CVE-2011-5063
Published: 2012-01-14
Description: The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check realm values, which might allow remote attackers to bypass intended access restrictions by leveraging the availability of a protection space with weaker authentication or authorization requirements, a different vulnerability than CVE-2011-1184.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-287
References: http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00006.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2337&w=2
CVE: CVE-2011-5064
Published: 2012-01-14
Description: DigestAuthenticator.java in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 uses Catalina as the hard-coded server secret (aka private key), which makes it easier for remote attackers to bypass cryptographic protection mechanisms by leveraging knowledge of this string, a different vulnerability than CVE-2011-1184.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00006.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2337&w=2