deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-0053
Published: 2012-01-28
Description: protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows remote attackers to obtain the values of HTTPOnly cookies via vectors involving a (1) long or (2) malformed header in conjunction with crafted web script.
CVSS Score: 4.3 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041; http://httpd.apache.org/security/vulnerabilities_22.html; http://kb.juniper.net/JSA10585
CVE: CVE-2011-3829
Published: 2012-01-29
Description: ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to obtain sensitive information via the file name, which reveals the installation path in an error message.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://packetstormsecurity.org/files/106933/sit_file_upload.rb.txt; http://secunia.com/advisories/45453; http://secunia.com/secunia_research/2011-75/
CVE: CVE-2011-3830
Published: 2012-01-29
Description: Cross-site scripting (XSS) vulnerability in search.php in Support Incident Tracker (aka SiT!) 3.65 allows remote attackers to inject arbitrary web script or HTML via the search_string parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/45453; http://secunia.com/secunia_research/2011-76/; http://www.osvdb.org/77000
CVE: CVE-2011-3831
Published: 2012-01-29
Description: SQL injection vulnerability in incident_attachments.php in Support Incident Tracker (aka SiT!) 3.65 allows remote attackers to execute arbitrary SQL commands via an uploaded file with a crafted file name.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/45453; http://secunia.com/secunia_research/2011-77/; http://www.kb.cert.org/vuls/id/576355
CVE: CVE-2011-3832
Published: 2012-01-29
Description: Eval injection vulnerability in config.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated administrators to execute arbitrary PHP code via the application_name parameter in a save action.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/45453; http://secunia.com/secunia_research/2011-78/; http://www.osvdb.org/77002
CVE: CVE-2011-3833
Published: 2012-01-29
Description: Unrestricted file upload vulnerability in ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to execute arbitrary PHP code by uploading a PHP file, then accessing it via a direct request to the file in an unspecified directory.
CVSS Score: 6.0 (MEDIUM)
References: http://packetstormsecurity.org/files/106933/sit_file_upload.rb.txt; http://secunia.com/advisories/45453; http://secunia.com/secunia_research/2011-79/
CVE: CVE-2011-5067
Published: 2012-01-29
Description: move_uploaded_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to obtain sensitive information via the file name, which reveals the installation path in an error message.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://www.kb.cert.org/vuls/id/576355; http://www.kb.cert.org/vuls/id/576355
CVE: CVE-2011-5068
Published: 2012-01-29
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Support Incident Tracker (aka SiT!) 3.65 allow remote attackers to hijack the authentication of user for requests that delete a user via user_delete.php and other unspecified programs.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://osvdb.org/show/osvdb/77657; http://secunia.com/advisories/45437; http://www.kb.cert.org/vuls/id/576355
CVE: CVE-2011-5069
Published: 2012-01-29
Description: Unrestricted file upload vulnerability in incident_attachments.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in unspecified directory, a different program than CVE-2011-3833.
CVSS Score: 6.0 (MEDIUM)
References: http://secunia.com/advisories/45437; http://www.kb.cert.org/vuls/id/576355; http://www.osvdb.org/77653
CVE: CVE-2011-5070
Published: 2012-01-29
Description: Multiple cross-site scripting (XSS) vulnerabilities in Support Incident Tracker (aka SiT!) 3.65 allow remote attackers to inject arbitrary web script or HTML via (1) the file name to incident_attachments.php; (2) unspecified vectors in link_add.php, possibly involving origref, linkref, linktype parameters, which are not properly handled in the clean_int function in lib/base.inc.php, or the redirect parameter, which is not properly handled in the html_redirect function in lib/html.inc.php; and (3) unspecified vectors in translate.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/45437; http://www.kb.cert.org/vuls/id/576355; http://www.osvdb.org/77654
CVE: CVE-2011-5071
Published: 2012-01-29
Description: Multiple SQL injection vulnerabilities in Support Incident Tracker (aka SiT!) before 3.64 allow remote attackers to execute arbitrary SQL commands via the (1) exc[] parameter to report_marketing.php, (2) selected[] parameter to tasks.php, (3) sites[] parameter to billable_incidents.php, or (4) search_string parameter to search.php. NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://en.securitylab.ru/lab/PT-2011-25; http://seclists.org/bugtraq/2011/Jul/174; http://secunia.com/advisories/45277
CVE: CVE-2012-0932
Published: 2012-01-29
Description: Cross-site scripting (XSS) vulnerability in admin/login.php in Lead Capture Page System allows remote attackers to inject arbitrary web script or HTML via the message parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/78455; http://packetstormsecurity.org/files/108887/leadcapturepagesystem-xss.txt; http://secunia.com/advisories/47702
CVE: CVE-2012-0933
Published: 2012-01-29
Description: Multiple cross-site scripting (XSS) vulnerabilities in Acidcat CMS 3.5.1, 3.5.2, 3.5.6, and possibly earlier allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) admin_colors.asp, (2) admin_config.asp, and (3) admin_cat_add.asp in admin/.
CVSS Score: 2.6 (LOW)
CWE: CWE-79
References: http://osvdb.org/78458; http://packetstormsecurity.org/files/108869/acidcat-xss.txt; http://secunia.com/advisories/47705
CVE: CVE-2012-0934
Published: 2012-01-29
Description: PHP remote file inclusion vulnerability in ajax/savetag.php in the Theme Tuner plugin for WordPress before 0.8 allows remote attackers to execute arbitrary PHP code via a URL in the tt-abspath parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://plugins.trac.wordpress.org/changeset/492167/theme-tuner#file2; http://secunia.com/advisories/47722; http://spareclockcycles.org/2011/09/18/exploitring-the-wordpress-extension-repos/
CVE: CVE-2012-0935
Published: 2012-01-29
Description: SQL injection vulnerability in Default.aspx in Aryadad CMS allows remote attackers to execute arbitrary SQL commands via the PageID parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/18405; http://www.securityfocus.com/bid/51627; https://exchange.xforce.ibmcloud.com/vulnerabilities/72639
CVE: CVE-2012-0936
Published: 2012-01-29
Description: Cross-site scripting (XSS) vulnerability in web/springframework/security/SecurityAuthenticationEventOnmsEventBuilder.java in OpenNMS 1.8.x before 1.8.17, 1.9.93 and earlier, and 1.10.x before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via the Username field, related to login.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://fisheye.opennms.org/browse/opennms/features/springframework-security/src/main/java/org/opennms/web/springframework/security/SecurityAuthenticationEventOnmsEventBuilder.java?r2=d2ce15470cb6c87c115c918eb86ef147486a9166&r1=80b80e110e4bce568fc2c6c0a15a; http://issues.opennms.org/browse/NMS-5128?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel#issue-tabs; http://issues.opennms.org/browse/NMS/fixforversion/10824#atl_token=BCL8-RCDX-MB62-2EZT%7C38eaf[PII_REDACTED]55c28f[PII_REDACTED]a8388d556%7Clout&selectedTab=com.atlassian.jira.plugin.system.project%3Aversion-summary-panel
CVE: CVE-2011-4337
Published: 2012-01-29
Description: Static code injection vulnerability in translate.php in Support Incident Tracker (aka SiT!) 3.45 through 3.65 allows remote attackers to inject arbitrary PHP code into an executable language file in the i18n directory via the lang variable.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://bugs.sitracker.org/view.php?id=1737; http://www.exploit-db.com/exploits/18132/; http://www.openwall.com/lists/oss-security/2011/11/22/3
CVE: CVE-2011-5072
Published: 2012-01-29
Description: Multiple SQL injection vulnerabilities in Support Incident Tracker (aka SiT!) before 3.65 allow remote attackers to execute arbitrary SQL commands via the (1) start parameter to portal/kb.php; (2) contractid parameter to contract_add_service.php; (3) id parameter to edit_escalation_path.php; (4) unlock, (5) lock, or (6) selected parameter to holding_queue.php; inc parameter in a report action to (7) report_customers.php or (8) report_incidents_by_site.php; (9) start parameter to search.php; or (10) sites parameter to transactions.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/46019; http://sitracker.org/wiki/ReleaseNotes365; http://www.securityfocus.com/archive/1/519636
CVE: CVE-2011-5073
Published: 2012-01-29
Description: Multiple cross-site scripting (XSS) vulnerabilities in Support Incident Tracker (aka SiT!) before 3.65 allow remote attackers to inject arbitrary web script or HTML via the (1) mode parameter to contact_support.php; (2) contractid parameter to contract_add_service.php; (3) user parameter to edit_backup_users.php; (4) id parameter to edit_escalation_path.php; the Referer to (5) forgotpwd.php, (6) an approvalpage action to billable_incidents.php, or (7) transactions.php; (8) action parameter to inbox.php; (9) search_string parameter in a findcontact action to incident_add.php; table1 parameter to (10) report_customers.php, (11) report_incidents_by_engineer.php, (12) report_incidents_by_site.php, or (13) report_marketing.php; or the (14) startdate or (15) enddate parameter to report_incidents_by_vendor.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/46019; http://sitracker.org/wiki/ReleaseNotes365; http://www.securityfocus.com/archive/1/519636
CVE: CVE-2011-5074
Published: 2012-01-29
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Support Incident Tracker (aka SiT!) before 3.65 allow remote attackers to hijack the authentication of administrators for requests that change administrator email, add a new administrator, or insert arbitrary script via (1) user_profile_edit.php or (2) user_add.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://secunia.com/advisories/46019; http://sitracker.org/wiki/ReleaseNotes365; http://www.securityfocus.com/archive/1/519636
CVE: CVE-2011-5075
Published: 2012-01-29
Description: translate.php in Support Incident Tracker (aka SiT!) 3.45 through 3.65 allows remote attackers to obtain sensitive information via a direct request using the save action, which reveals the installation path.
CVSS Score: 5.0 (MEDIUM)
References: http://bugs.sitracker.org/view.php?id=1737; http://www.exploit-db.com/exploits/18132/; http://www.openwall.com/lists/oss-security/2011/11/22/3
CVE: CVE-2011-4898
Published: 2012-01-30
Description: wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier generates different error messages for requests lacking a dbname parameter depending on whether the MySQL credentials are valid, which makes it easier for remote attackers to conduct brute-force attacks via a series of requests with different uname and pwd parameters.  NOTE: the vendor disputes the significance of this issue; also, it is unclear whether providing intentionally vague error messages during installation would be reasonable from a usability perspective
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://archives.neohapsis.com/archives/bugtraq/2012-01/0150.html; http://www.exploit-db.com/exploits/18417; https://www.trustwave.com/spiderlabs/advisories/TWSL2012-002.txt
CVE: CVE-2011-4899
Published: 2012-01-30
Description: wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not ensure that the specified MySQL database service is appropriate, which allows remote attackers to configure an arbitrary database via the dbhost and dbname parameters, and subsequently conduct static code injection and cross-site scripting (XSS) attacks via (1) an HTTP request or (2) a MySQL query.  NOTE: the vendor disputes the significance of this issue; however, remote code execution makes the issue important in many realistic environments
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2012-01/0150.html; http://www.exploit-db.com/exploits/18417; https://www.trustwave.com/spiderlabs/advisories/TWSL2012-002.txt
CVE: CVE-2012-0782
Published: 2012-01-30
Description: Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) dbhost, (2) dbname, or (3) uname parameter. NOTE: the vendor disputes the significance of this issue; also, it is unclear whether this specific XSS scenario has security relevance
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2012-01/0150.html; http://www.exploit-db.com/exploits/18417; https://www.trustwave.com/spiderlabs/advisories/TWSL2012-002.txt
CVE: CVE-2012-0817
Published: 2012-01-30
Description: Memory leak in smbd in Samba 3.6.x before 3.6.3 allows remote attackers to cause a denial of service (memory and CPU consumption) by making many connection requests.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-February/072930.html; http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00008.html; http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00014.html
CVE: CVE-2012-0937
Published: 2012-01-30
Description: wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not limit the number of MySQL queries sent to external MySQL database servers, which allows remote attackers to use WordPress as a proxy for brute-force attacks or denial of service attacks via the dbhost parameter, a different vulnerability than CVE-2011-4898.  NOTE: the vendor disputes the significance of this issue because an incomplete WordPress installation might be present on the network for only a short time
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2012-01/0150.html; http://www.exploit-db.com/exploits/18417; https://www.trustwave.com/spiderlabs/advisories/TWSL2012-002.txt
CVE: CVE-2012-0809
Published: 2012-02-01
Description: Format string vulnerability in the sudo_debug function in Sudo 1.8.0 through 1.8.3p1 allows local users to execute arbitrary code via format string sequences in the program name for sudo.
CVSS Score: 7.2 (HIGH)
CWE: CWE-134
References: http://archives.neohapsis.com/archives/fulldisclosure/2012-01/0591.html; http://archives.neohapsis.com/archives/fulldisclosure/2012-01/att-0591/advisory_sudo.txt; http://security.gentoo.org/glsa/glsa-201203-06.xml
CVE: CVE-2011-3659
Published: 2012-02-01
Description: Use-after-free vulnerability in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 might allow remote attackers to execute arbitrary code via vectors related to incorrect AttributeChildRemoved notifications that affect access to removed nsDOMAttribute child nodes.
CVSS Score: 9.3 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html
CVE: CVE-2011-3670
Published: 2012-02-01
Description: Mozilla Firefox before 3.6.26 and 4.x through 6.0, Thunderbird before 3.1.18 and 5.0 through 6.0, and SeaMonkey before 2.4 do not properly enforce the IPv6 literal address syntax, which allows remote attackers to obtain sensitive information by making XMLHttpRequest calls through a proxy and reading the error messages.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html
CVE: CVE-2012-0442
Published: 2012-02-01
Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Score: 9.3 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html
CVE: CVE-2012-0443
Published: 2012-02-01
Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html; http://www.mandriva.com/security/advisories?name=MDVSA-2012:013; http://www.mozilla.org/security/announce/2012/mfsa2012-01.html
CVE: CVE-2012-0444
Published: 2012-02-01
Description: Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildView data structures, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Ogg Vorbis file.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html
CVE: CVE-2012-0445
Published: 2012-02-01
Description: Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to bypass the HTML5 frame-navigation policy and replace arbitrary sub-frames by creating a form submission target with a sub-frame's name attribute.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html; http://osvdb.org/78735; http://secunia.com/advisories/49055
CVE: CVE-2012-0446
Published: 2012-02-01
Description: Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to inject arbitrary web script or HTML via a (1) web page or (2) Firefox extension, related to improper enforcement of XPConnect security restrictions for frame scripts that call untrusted objects.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html; http://secunia.com/advisories/49055; http://www.mandriva.com/security/advisories?name=MDVSA-2012:013
CVE: CVE-2012-0447
Published: 2012-02-01
Description: Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize data for image/vnd.microsoft.icon images, which allows remote attackers to obtain potentially sensitive information by reading a PNG image that was created through conversion from an ICO image.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html; http://secunia.com/advisories/49055; http://www.mandriva.com/security/advisories?name=MDVSA-2012:013
CVE: CVE-2012-0449
Published: 2012-02-01
Description: Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a malformed XSLT stylesheet that is embedded in a document.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html
CVE: CVE-2012-0450
Published: 2012-02-01
Description: Mozilla Firefox 4.x through 9.0 and SeaMonkey before 2.7 on Linux and Mac OS X set weak permissions for Firefox Recovery Key.html, which might allow local users to read a Firefox Sync key via standard filesystem operations.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html; http://osvdb.org/78741; http://www.mandriva.com/security/advisories?name=MDVSA-2012:013
CVE: CVE-2011-4790
Published: 2012-02-02
Description: Unspecified vulnerability in HP Network Automation 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to execute arbitrary code via unknown vectors.
CVSS Score: 9.3 (HIGH)
References: http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03171149; http://secunia.com/advisories/47738; http://secunia.com/advisories/47826
CVE: CVE-2012-0057
Published: 2012-02-02
Description: PHP before 5.3.9 has improper libxslt security settings, which allows remote attackers to create arbitrary files via a crafted XSLT stylesheet that uses the libxslt output extension.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-264
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041; http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00013.html; http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html
CVE: CVE-2011-1573
Published: 2012-02-02
Description: net/sctp/sm_make_chunk.c in the Linux kernel before 2.6.34, when addip_enable and auth_enable are used, does not consider the amount of zero padding during calculation of chunk lengths for (1) INIT and (2) INIT ACK chunks, which allows remote attackers to cause a denial of service (OOPS) via crafted packet data.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-682
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a8170c35e738d62e9919ce5b109cf4ed66e95bde; http://mirror.anl.gov/pub/linux/kernel/v2.6/ChangeLog-2.6.34; http://openwall.com/lists/oss-security/2011/04/11/12
CVE: CVE-2011-2525
Published: 2012-02-02
Description: The qdisc_notify function in net/sched/sch_api.c in the Linux kernel before 2.6.35 does not prevent tc_fill_qdisc function calls referencing builtin (aka CQ_F_BUILTIN) Qdisc structures, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a crafted call.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=53b0f08042f04813cd1a7473dacd3edfacb28eb3; http://kerneltrap.org/mailarchive/linux-netdev/2010/5/21/6277805; http://mirror.anl.gov/pub/linux/kernel/v2.6/ChangeLog-2.6.35