deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-1547
Published: 2011-05-09
Description: Multiple stack consumption vulnerabilities in the kernel in NetBSD 4.0, 5.0 before 5.0.3, and 5.1 before 5.1.1, when IPsec is enabled, allow remote attackers to cause a denial of service (memory corruption and panic) or possibly have unspecified other impact via a crafted (1) IPv4 or (2) IPv6 packet with nested IPComp headers.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2011-004.txt.asc; http://lists.grok.org.uk/pipermail/full-disclosure/2011-April/080031.html; http://www.kb.cert.org/vuls/id/668220
CVE: CVE-2011-1745
Published: 2011-05-09
Description: Integer overflow in the agp_generic_insert_memory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 allows local users to gain privileges or cause a denial of service (system crash) via a crafted AGPIOC_BIND agp_ioctl ioctl call.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-190
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=194b3da873fd334ef183806db751473512af29ce; http://openwall.com/lists/oss-security/2011/04/21/4; http://openwall.com/lists/oss-security/2011/04/22/7
CVE: CVE-2011-1746
Published: 2011-05-09
Description: Multiple integer overflows in the (1) agp_allocate_memory and (2) agp_create_user_memory functions in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 allow local users to trigger buffer overflows, and consequently cause a denial of service (system crash) or possibly have unspecified other impact, via vectors related to calls that specify a large number of memory pages.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-189
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b522f02184b413955f3bc952e3776ce41edc6355; http://openwall.com/lists/oss-security/2011/04/21/4; http://openwall.com/lists/oss-security/2011/04/22/7
CVE: CVE-2011-1747
Published: 2011-05-09
Description: The agp subsystem in the Linux kernel 2.6.38.5 and earlier does not properly restrict memory allocation by the (1) AGPIOC_RESERVE and (2) AGPIOC_ALLOCATE ioctls, which allows local users to cause a denial of service (memory consumption) by making many calls to these ioctls.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-399
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b522f02184b413955f3bc952e3776ce41edc6355; http://openwall.com/lists/oss-security/2011/04/21/4; http://openwall.com/lists/oss-security/2011/04/22/10
CVE: CVE-2011-2022
Published: 2011-05-09
Description: The agp_generic_remove_memory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 does not validate a certain start parameter, which allows local users to gain privileges or cause a denial of service (system crash) via a crafted AGPIOC_UNBIND agp_ioctl ioctl call, a different vulnerability than CVE-2011-1745.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-20
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=194b3da873fd334ef183806db751473512af29ce; http://openwall.com/lists/oss-security/2011/04/21/4; http://openwall.com/lists/oss-security/2011/04/22/7
CVE: CVE-2010-4284
Published: 2011-05-09
Description: SQL injection vulnerability in the authentication form in the integrated web server in the Data Management Server (DMS) before 1.4.3 in Samsung Integrated Management System allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.kb.cert.org/vuls/id/236668; http://www.us-cert.gov/control_systems/pdf/ICSA-11-069-01.pdf; http://www.kb.cert.org/vuls/id/236668
CVE: CVE-2011-0426
Published: 2011-05-09
Description: Directory traversal vulnerability in vCenter Server in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1, and VMware VirtualCenter 2.5 before Update 6a, allows remote attackers to read arbitrary files via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: http://lists.vmware.com/pipermail/security-announce/2011/000137.html; http://securitytracker.com/id?1025502; http://www.vmware.com/security/advisories/VMSA-2011-0008.html
CVE: CVE-2011-1015
Published: 2011-05-09
Description: The is_cgi method in CGIHTTPServer.py in the CGIHTTPServer module in Python 2.5, 2.6, and 3.0 allows remote attackers to read script source code via an HTTP GET request that lacks a / (slash) character at the beginning of the URI.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://bugs.python.org/issue2254; http://hg.python.org/cpython/rev/c6c4398293bd/; http://openwall.com/lists/oss-security/2011/02/23/27
CVE: CVE-2011-1574
Published: 2011-05-09
Description: Stack-based buffer overflow in the ReadS3M method in load_s3m.cpp in libmodplug before 0.8.8.2 allows remote attackers to execute arbitrary code via a crafted S3M file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=622091; http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms/modplug-xmms%3Ba=commit%3Bh=aecef259828a89bb00c2e6f78e89de7363b2237b; http://openwall.com/lists/oss-security/2011/04/11/13
CVE: CVE-2011-1598
Published: 2011-05-09
Description: The bcm_release function in net/can/bcm.c in the Linux kernel before 2.6.39-rc6 does not properly validate a socket data structure, which allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a crafted release operation.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-476
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c6914a6f261aca0c9f715f883a353ae7ff51fe83; http://openwall.com/lists/oss-security/2011/04/20/2; http://openwall.com/lists/oss-security/2011/04/20/6
CVE: CVE-2011-1748
Published: 2011-05-09
Description: The raw_release function in net/can/raw.c in the Linux kernel before 2.6.39-rc6 does not properly validate a socket data structure, which allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a crafted release operation.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-476
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=10022a6c66e199d8f61d9044543f38785713cbbd; http://openwall.com/lists/oss-security/2011/04/20/7; http://openwall.com/lists/oss-security/2011/04/21/1
CVE: CVE-2011-1788
Published: 2011-05-09
Description: vCenter Server in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1 allows local users to discover the SOAP session ID via unspecified vectors.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://lists.vmware.com/pipermail/security-announce/2011/000137.html; http://osvdb.org/72179; http://securitytracker.com/id?1025502
CVE: CVE-2011-1789
Published: 2011-05-09
Description: The self-extracting installer in the vSphere Client Installer package in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1, VMware ESXi 4.x before 4.1 Update 1, and VMware ESX 4.x before 4.1 Update 1 does not have a digital signature, which might make it easier for remote attackers to spoof the software distribution via a Trojan horse installer.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://lists.vmware.com/pipermail/security-announce/2011/000137.html; http://securitytracker.com/id?1025502; http://www.vmware.com/security/advisories/VMSA-2011-0008.html
CVE: CVE-2011-1907
Published: 2011-05-09
Description: ISC BIND 9.8.x before 9.8.0-P1, when Response Policy Zones (RPZ) RRset replacement is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an RRSIG query.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://secunia.com/advisories/44416; http://www.securityfocus.com/archive/1/517900/100/0/threaded; http://www.securityfocus.com/bid/47734
CVE: CVE-2011-0904
Published: 2011-05-10
Description: The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3, 2.32.x before 2.32.2, 3.0.x before 3.0.2, and 3.1.x before 3.1.1, when raw encoding is used, allows remote authenticated users to cause a denial of service (daemon crash) via a large (1) X position or (2) Y position value in a framebuffer update request that triggers an out-of-bounds memory access, related to the rfbTranslateNone and rfbSendRectEncodingRaw functions.
CVSS Score: 3.5 (LOW)
CWE: CWE-119
References: http://ftp.gnome.org/pub/GNOME/sources/vino/2.28/vino-2.28.3.news; http://ftp.gnome.org/pub/GNOME/sources/vino/2.32/vino-2.32.2.news; http://ftp.gnome.org/pub/GNOME/sources/vino/3.0/vino-3.0.2.news
CVE: CVE-2011-0905
Published: 2011-05-10
Description: The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3, 2.32.x before 2.32.2, 3.0.x before 3.0.2, and 3.1.x before 3.1.1, when tight encoding is used, allows remote authenticated users to cause a denial of service (daemon crash) via crafted dimensions in a framebuffer update request that triggers an out-of-bounds read operation.
CVSS Score: 3.5 (LOW)
CWE: CWE-119
References: http://ftp.gnome.org/pub/GNOME/sources/vino/2.28/vino-2.28.3.news; http://ftp.gnome.org/pub/GNOME/sources/vino/2.32/vino-2.32.2.news; http://ftp.gnome.org/pub/GNOME/sources/vino/3.0/vino-3.0.2.news
CVE: CVE-2011-1824
Published: 2011-05-10
Description: The VEGAOpBitmap::AddLine function in Opera before 10.61 does not properly initialize memory during processing of the SIZE attribute of a SELECT element, which allows remote attackers to trigger an invalid memory write operation, and consequently cause a denial of service (application crash) or possibly execute arbitrary code, via a large integer attribute value.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://securityreason.com/securityalert/8244; http://www.kb.cert.org/vuls/id/778396; http://www.opera.com/docs/changelogs/mac/1061/
CVE: CVE-2011-2074
Published: 2011-05-10
Description: Unspecified vulnerability in the client in Skype 5.x before 5.1.0.922 on Mac OS X allows remote authenticated users to execute arbitrary code or cause a denial of service (application crash) via a crafted message.
CVSS Score: 8.5 (HIGH)
References: http://blogs.skype.com/security/2011/05/security_vulnerability_in_mac.html; http://isc.sans.edu/diary.html?storyid=10837; http://secunia.com/advisories/44522
CVE: CVE-2011-2075
Published: 2011-05-10
Description: Unspecified vulnerability in Google Chrome 11.0.696.65 on Windows 7 SP1 allows remote attackers to execute arbitrary code via unknown vectors.  NOTE: as of 20110510, the only disclosure is a vague advisory that possibly relates to multiple vulnerabilities or multiple products.  However, because it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.
CVSS Score: 9.3 (HIGH)
References: http://www.securityfocus.com/bid/47771; http://www.vupen.com/demos/VUPEN_Pwning_Chrome.php; http://www.youtube.com/watch?v=c8cQ0yU89sk
CVE: CVE-2010-0216
Published: 2011-05-10
Description: authenticate_ad_setup_finished.cfm in MediaCAST 8 and earlier allows remote attackers to discover usernames and cleartext passwords by reading the error messages returned for requests that use the UserID parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://secunia.com/advisories/44182; http://securityreason.com/securityalert/8245; http://www.osvdb.org/72079
CVE: CVE-2011-1271
Published: 2011-05-10
Description: The JIT compiler in Microsoft .NET Framework 3.5 Gold and SP1, 3.5.1, and 4.0, when IsJITOptimizerDisabled is false, does not properly handle expressions related to null strings, which allows context-dependent attackers to bypass intended access restrictions, and consequently execute arbitrary code, in opportunistic circumstances by leveraging a crafted application, as demonstrated by (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Framework JIT Optimization Vulnerability."
CVSS Score: 7.7 (HIGH)
CWE: CWE-264, CWE-476
References: http://stackoverflow.com/questions/2135509/bug-only-occurring-when-compile-optimization-enabled/; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-044; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12686
CVE: CVE-2011-2076
Published: 2011-05-10
Description: MediaCAST 8 and earlier stores passwords in cleartext, which makes it easier for context-dependent attackers to obtain sensitive information by reading an unspecified password data store, a different vulnerability than CVE-2010-0216.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://securityreason.com/securityalert/8245; http://www.packetninjas.net/storage/advisories/MediaCast-PWDump-FINAL.txt; http://securityreason.com/securityalert/8245
CVE: CVE-2011-2077
Published: 2011-05-10
Description: The default configuration of the New Atlanta BlueDragon administrative interface in MediaCAST 8 and earlier enables external TCP connections to port 10000, instead of connections only from 127.0.0.1, which makes it easier for remote attackers to have an unspecified impact via a TCP session.
CVSS Score: 7.5 (HIGH)
CWE: CWE-16
References: http://securityreason.com/securityalert/8245; http://www.packetninjas.net/storage/advisories/MediaCast-PWDump-FINAL.txt; http://securityreason.com/securityalert/8245
CVE: CVE-2011-2078
Published: 2011-05-10
Description: Multiple cross-site scripting (XSS) vulnerabilities in the New Atlanta BlueDragon administrative interface in MediaCAST 8 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://securityreason.com/securityalert/8245; http://www.packetninjas.net/storage/advisories/MediaCast-PWDump-FINAL.txt; http://securityreason.com/securityalert/8245
CVE: CVE-2011-2079
Published: 2011-05-10
Description: MediaCAST 8 and earlier allows remote attackers to have an unspecified impact via a (1) CP_RIGHTSOURCE or (2) bdclient_Inventive cookie to the default URI under inventivex/managetraining/, related to an "XML injection" issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/44182; http://securityreason.com/securityalert/8245; http://www.packetninjas.net/storage/advisories/MediaCast-PWDump-FINAL.txt
CVE: CVE-2011-2080
Published: 2011-05-10
Description: Multiple SQL injection vulnerabilities in MediaCAST 8 and earlier allow remote attackers to execute arbitrary SQL commands via (1) a CP_ENLARGESTYLE cookie to the default URI under inventivex/managetraining/ or (2) unspecified input to authenticate_ad_setup_finished.cfm.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/44182; http://securityreason.com/securityalert/8245; http://www.packetninjas.net/storage/advisories/MediaCast-PWDump-FINAL.txt
CVE: CVE-2011-2081
Published: 2011-05-10
Description: MediaCAST 8 and earlier does not properly handle requests for inventivex/isptools/release/metadata/globalIncludeFolders.txt, which allows remote attackers to obtain sensitive information via unspecified vectors related to the Public/ directory tree.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://secunia.com/advisories/44182; http://securityreason.com/securityalert/8245; http://www.packetninjas.net/storage/advisories/MediaCast-PWDump-FINAL.txt
CVE: CVE-2011-0341
Published: 2011-05-13
Description: Stack-based buffer overflow in the pdfmoz_onmouse function in apps/mozilla/moz_main.c in the MuPDF plug-in 2008.09.02 for Firefox allows remote attackers to execute arbitrary code via a crafted web site.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/43739; http://secunia.com/secunia_research/2011-38/; http://www.osvdb.org/72177
CVE: CVE-2011-0761
Published: 2011-05-13
Description: Perl 5.10.x allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) by leveraging an ability to inject arguments into a (1) getpeername, (2) readdir, (3) closedir, (4) getsockname, (5) rewinddir, (6) tell, or (7) telldir function call.
CVSS Score: 5.0 (MEDIUM)
References: http://securityreason.com/securityalert/8248; http://securitytracker.com/id?1025507; http://www.securityfocus.com/archive/1/517916/100/0/threaded
CVE: CVE-2011-0995
Published: 2011-05-13
Description: The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise (SLE) 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://secunia.com/advisories/44418; http://support.novell.com/security/cve/CVE-2011-0995.html; http://www.osvdb.org/72180
CVE: CVE-2011-1248
Published: 2011-05-13
Description: WINS in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, R2, and R2 SP1 does not properly handle socket send exceptions, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted packets, related to unintended stack-frame values and buffer passing, aka "WINS Service Failed Response Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-035; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12724; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-035
CVE: CVE-2011-1269
Published: 2011-05-13
Description: Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 make unspecified function calls during file parsing without proper handling of memory, which allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "Presentation Memory Corruption RCE Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-036; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12438; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-036
CVE: CVE-2011-1270
Published: 2011-05-13
Description: Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "Presentation Buffer Overrun RCE Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-036; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12256; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-036
CVE: CVE-2011-1325
Published: 2011-05-13
Description: Cross-site request forgery (CSRF) vulnerability in EC-CUBE before 2.11.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-352
References: http://jvn.jp/en/jp/JVN37878530/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2011-000029; http://secunia.com/advisories/44487
CVE: CVE-2011-1720
Published: 2011-05-13
Description: The SMTP server in Postfix before 2.5.13, 2.6.x before 2.6.10, 2.7.x before 2.7.4, and 2.8.x before 2.8.3, when certain Cyrus SASL authentication methods are enabled, does not create a new server handle after client authentication fails, which allows remote attackers to cause a denial of service (heap memory corruption and daemon crash) or possibly execute arbitrary code via an invalid AUTH command with one method followed by an AUTH command with a different method.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705; http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00002.html; http://secunia.com/advisories/44500
CVE: CVE-2011-1737
Published: 2011-05-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in the Email application in HP Palm webOS 1.4.5 and 1.4.5.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/47787; http://www.securitytracker.com/id?1025514; https://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02822174
CVE: CVE-2011-1738
Published: 2011-05-13
Description: HP Palm webOS 1.4.5 and 1.4.5.1 does not properly restrict Plug-in Development Kit (PDK) applications, which allows local users to gain privileges by leveraging unintended filesystem write access.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/47788; http://www.securitytracker.com/id?1025514; https://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02822174
CVE: CVE-2011-1772
Published: 2011-05-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in XWork in Apache Struts 2.x before 2.2.3, and OpenSymphony XWork in OpenSymphony WebWork, allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) an action name, (2) the action attribute of an s:submit element, or (3) the method attribute of an s:submit element.
CVSS Score: 2.6 (LOW)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN25435092/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2011-000106; http://secureappdev.blogspot.com/2011/05/Struts_2_XWork_WebWork_XSS_in_error_pages.html
CVE: CVE-2011-1840
Published: 2011-05-13
Description: The MartiniCreations PassmanLite Password Manager application before 1.48 for Android stores the master password and unspecified other account information in cleartext, which allows local users to obtain sensitive information by leveraging shell access.
CVSS Score: 2.1 (LOW)
CWE: CWE-310
References: http://securityreason.com/securityalert/8250; http://www.securityfocus.com/bid/47765; http://www.simonroses.com/wp-content/uploads/2011/05/SRF-SA-2011-01.txt
CVE: CVE-2011-1848
Published: 2011-05-13
Description: Stack-based buffer overflow in img.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a crafted length field in a packet.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02822750; http://securitytracker.com/id?1025519; http://www.securityfocus.com/bid/47789
CVE: CVE-2011-1849
Published: 2011-05-13
Description: tftpserver.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote attackers to create or overwrite files, and subsequently execute arbitrary code, via a crafted WRQ request.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02822750; http://securitytracker.com/id?1025519; http://www.securityfocus.com/bid/47789
CVE: CVE-2011-1850
Published: 2011-05-13
Description: Stack-based buffer overflow in the logging functionality in dbman.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote attackers to execute arbitrary code via vectors related to a received action.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02822750; http://securitytracker.com/id?1025519; http://www.securityfocus.com/bid/47789
CVE: CVE-2011-1851
Published: 2011-05-13
Description: Stack-based buffer overflow in tftpserver.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a long mode field.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02822750; http://securitytracker.com/id?1025519; http://www.securityfocus.com/bid/47789