deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-4367
Published: 2010-12-02
Description: awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located on a (1) WebDAV server or (2) NFS server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://awstats.sourceforge.net/docs/awstats_changelog.txt; http://www.exploitdevelopment.com/Vulnerabilities/2010-WEB-001.html; http://www.mandriva.com/security/advisories?name=MDVSA-2011:033
CVE: CVE-2010-4368
Published: 2010-12-02
Description: awstats.cgi in AWStats before 7.0 on Windows accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located at a UNC share pathname.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://awstats.sourceforge.net/docs/awstats_changelog.txt; http://www.exploitdevelopment.com/Vulnerabilities/2010-WEB-001.html; http://www.kb.cert.org/vuls/id/870532
CVE: CVE-2010-4369
Published: 2010-12-02
Description: Directory traversal vulnerability in AWStats before 7.0 allows remote attackers to have an unspecified impact via a crafted LoadPlugin directory.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-22
References: http://awstats.sourceforge.net/docs/awstats_changelog.txt; http://secunia.com/advisories/43004; http://www.mandriva.com/security/advisories?name=MDVSA-2011:033
CVE: CVE-2010-4370
Published: 2010-12-02
Description: Multiple integer overflows in the in_midi plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code via a crafted MIDI file that triggers a buffer overflow.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://forums.winamp.com/showthread.php?t=324322; http://forums.winamp.com/showthread.php?threadid=159785; http://secunia.com/advisories/42004
CVE: CVE-2010-4371
Published: 2010-12-02
Description: Buffer overflow in the in_mod plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vectors related to the comment box.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://forums.winamp.com/showthread.php?t=324322; http://forums.winamp.com/showthread.php?threadid=159785; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12309
CVE: CVE-2010-4372
Published: 2010-12-02
Description: Integer overflow in the in_nsv plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vectors related to improper allocation of memory for NSV metadata, a different vulnerability than CVE-2010-2586.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://forums.winamp.com/showthread.php?t=324322; http://forums.winamp.com/showthread.php?threadid=159785; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12358
CVE: CVE-2010-4373
Published: 2010-12-02
Description: The in_mp4 plugin in Winamp before 5.6 allows remote attackers to cause a denial of service (application crash) via crafted (1) metadata or (2) albumart in an invalid MP4 file.
CVSS Score: 4.3 (MEDIUM)
References: http://forums.winamp.com/showthread.php?t=324322; http://forums.winamp.com/showthread.php?threadid=159785; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12425
CVE: CVE-2010-4374
Published: 2010-12-02
Description: The in_mkv plugin in Winamp before 5.6 allows remote attackers to cause a denial of service (application crash) via a Matroska Video (MKV) file containing a string with a crafted length.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://forums.winamp.com/showthread.php?t=324322; http://forums.winamp.com/showthread.php?threadid=159785; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12332
CVE: CVE-2010-4278
Published: 2010-12-02
Description: operation/agentes/networkmap.php in Pandora FMS before 3.1.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the layout parameter in an operation/agentes/networkmap action to index.php.
CVSS Score: 9.0 (HIGH)
CWE: CWE-78
References: http://osvdb.org/69550; http://seclists.org/fulldisclosure/2010/Nov/326; http://secunia.com/advisories/42347
CVE: CVE-2010-4279
Published: 2010-12-02
Description: The default configuration of Pandora FMS 3.1 and earlier specifies an empty string for the loginhash_pwd field, which allows remote attackers to bypass authentication by sending a request to index.php with "admin" in the loginhash_user parameter, in conjunction with the md5 hash of "admin" in the loginhash_data parameter.
CVSS Score: 10.0 (HIGH)
CWE: CWE-287
References: http://osvdb.org/69549; http://packetstormsecurity.com/files/129830/Pandora-3.1-Auth-Bypass-Arbitrary-File-Upload.html; http://seclists.org/fulldisclosure/2010/Nov/326
CVE: CVE-2010-4280
Published: 2010-12-02
Description: Multiple SQL injection vulnerabilities in Pandora FMS before 3.1.1 allow remote authenticated users to execute arbitrary SQL commands via (1) the id_group parameter in an operation/agentes/ver_agente action to ajax.php or (2) the group_id parameter in an operation/agentes/estado_agente action to index.php, related to operation/agentes/estado_agente.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/69547; http://osvdb.org/69548; http://seclists.org/fulldisclosure/2010/Nov/326
CVE: CVE-2010-4281
Published: 2010-12-02
Description: Incomplete blacklist vulnerability in the safe_url_extraclean function in ajax.php in Pandora FMS before 3.1.1 allows remote attackers to execute arbitrary PHP code by using a page parameter containing a UNC share pathname, which bypasses the check for the : (colon) character.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://osvdb.org/69546; http://seclists.org/fulldisclosure/2010/Nov/326; http://secunia.com/advisories/42347
CVE: CVE-2010-4282
Published: 2010-12-02
Description: Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers to include and execute arbitrary local files via (1) the page parameter to ajax.php or (2) the id parameter to general/pandora_help.php, and allow remote attackers to include and execute, create, modify, or delete arbitrary local files via (3) the layout parameter to operation/agentes/networkmap.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://osvdb.org/69543; http://osvdb.org/69544; http://osvdb.org/69545
CVE: CVE-2010-4283
Published: 2010-12-02
Description: PHP remote file inclusion vulnerability in extras/pandora_diag.php in Pandora FMS before 3.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the argv[1] parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://osvdb.org/69542; http://seclists.org/fulldisclosure/2010/Nov/326; http://secunia.com/advisories/42347
CVE: CVE-2010-4313
Published: 2010-12-02
Description: Unrestricted file upload vulnerability in fileman_file_upload.php in Orbis CMS 1.0.2 allows remote authenticated users to execute arbitrary code by uploading a .php file, and then accessing it via a direct request to the file in uploads/.
CVSS Score: 6.0 (MEDIUM)
References: http://osvdb.org/69599; http://www.exploit-db.com/exploits/15636; http://www.securityfocus.com/archive/1/514942/100/0/threaded
CVE: CVE-2010-4399
Published: 2010-12-06
Description: Directory traversal vulnerability in languages.inc.php in DynPG CMS 4.1.1 and 4.2.0, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the CHG_DYNPG_SET_LANGUAGE parameter to index.php.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/69539; http://packetstormsecurity.org/files/view/96230/dynpg-lfisqldisclose.txt; http://secunia.com/advisories/42380
CVE: CVE-2010-4400
Published: 2010-12-06
Description: SQL injection vulnerability in _rights.php in DynPG CMS 4.2.0 allows remote attackers to execute arbitrary SQL commands via the giveRights_UserId parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/69631; http://packetstormsecurity.org/files/view/96230/dynpg-lfisqldisclose.txt; http://www.dynpg.org/cms-freeware_en.php?t=DynPG+Update+4.2.1+Security+Update&read_article=226
CVE: CVE-2010-4401
Published: 2010-12-06
Description: languages.inc.php in DynPG CMS 4.2.0 allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://osvdb.org/69632; http://packetstormsecurity.org/files/view/96230/dynpg-lfisqldisclose.txt; http://www.dynpg.org/cms-freeware_en.php?t=DynPG+Update+4.2.1+Security+Update&read_article=226
CVE: CVE-2010-4402
Published: 2010-12-06
Description: Multiple cross-site scripting (XSS) vulnerabilities in wp-login.php in the Register Plus plugin 3.5.1 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) firstname, (2) lastname, (3) website, (4) aim, (5) yahoo, (6) jabber, (7) about, (8) pass1, and (9) pass2 parameters in a register action.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/69491; http://packetstormsecurity.org/files/view/96143/registerplus-xss.txt; http://secunia.com/advisories/42360
CVE: CVE-2010-4403
Published: 2010-12-06
Description: The Register Plus plugin 3.5.1 and earlier for WordPress allows remote attackers to obtain sensitive information via a direct request to (1) dash_widget.php and (2) register-plus.php, which reveals the installation path in an error message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://packetstormsecurity.org/files/view/96143/registerplus-xss.txt; http://websecurity.com.ua/4539; http://www.securityfocus.com/archive/1/514903/100/0/threaded
CVE: CVE-2010-4404
Published: 2010-12-06
Description: SQL injection vulnerability in the Yannick Gaultier sh404SEF component before 2.1.8.777 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://dev.anything-digital.com/Forum/Announcements/9100-Urgent-sh404SEF-security-release-Joomla-1.5/; http://secunia.com/advisories/42430; http://twitter.com/jeffchannell/status/[PII_REDACTED]
CVE: CVE-2010-4405
Published: 2010-12-06
Description: Cross-site scripting (XSS) vulnerability in the Yannick Gaultier sh404SEF component before 2.1.8.777 for Joomla! allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://dev.anything-digital.com/Forum/Announcements/9100-Urgent-sh404SEF-security-release-Joomla-1.5/; http://secunia.com/advisories/42430; http://twitter.com/jeffchannell/status/[PII_REDACTED]
CVE: CVE-2010-4406
Published: 2010-12-06
Description: Directory traversal vulnerability in gallery.php in Brunetton LittlePhpGallery 1.0.2, when magic_quotes_gpc is disabled, allows remote attackers to list, include, and execute arbitrary local files via a ..// (dot dot slash slash) in the repertoire parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/69564; http://packetstormsecurity.org/files/view/96296/littlephpgallery-lfi.txt; http://secunia.com/advisories/42444
CVE: CVE-2010-4407
Published: 2010-12-06
Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in AlGuest 1.1c-patched allow remote attackers to inject arbitrary web script or HTML via the (1) nome (nickname), (2) messaggio (message), and (3) link (homepage) parameters.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://evuln.com/vulns/151/summary.html; http://packetstormsecurity.org/files/view/96297/alguest-xss.txt; http://www.securityfocus.com/archive/1/514960/100/0/threaded
CVE: CVE-2010-3613
Published: 2010-12-06
Description: named in ISC BIND 9.6.2 before 9.6.2-P3, 9.6-ESV before 9.6-ESV-R3, and 9.7.x before 9.7.2-P3 does not properly handle the combination of signed negative responses and corresponding RRSIG records in the cache, which allows remote attackers to cause a denial of service (daemon crash) via a query for cached data.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2011-001.txt.asc; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051910.html
CVE: CVE-2010-3614
Published: 2010-12-06
Description: named in ISC BIND 9.x before 9.6.2-P3, 9.7.x before 9.7.2-P3, 9.4-ESV before 9.4-ESV-R4, and 9.6-ESV before 9.6-ESV-R3 does not properly determine the security status of an NS RRset during a DNSKEY algorithm rollover, which might allow remote attackers to cause a denial of service (DNSSEC validation error) by triggering a rollover.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-20
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051910.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051963.html
CVE: CVE-2010-3615
Published: 2010-12-06
Description: named in ISC BIND 9.7.2-P2 does not check all intended locations for allow-query ACLs, which might allow remote attackers to make successful requests for private DNS records via the standard DNS query mechanism.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051963.html; http://osvdb.org/69568; http://secunia.com/advisories/42458
CVE: CVE-2010-4254
Published: 2010-12-06
Description: Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic methods, which allows remote attackers to bypass generic constraints, and possibly execute arbitrary code, via a crafted method call.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html; http://secunia.com/advisories/42373
CVE: CVE-2010-4398
Published: 2010-12-06
Description: Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges, and bypass the User Account Control (UAC) feature, via a crafted REG_BINARY value for a SystemDefaultEUDCFont registry key, aka "Driver Improper Interaction with Windows Kernel Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: http://isc.sans.edu/diary.html?storyid=9988; http://nakedsecurity.sophos.com/2010/11/25/new-windows-zero-day-flaw-bypasses-uac/; http://secunia.com/advisories/42356
CVE: CVE-2010-2639
Published: 2010-12-06
Description: IBM WebSphere Commerce Enterprise 7.0 before 7.0.0.2 allows remote attackers to read messages intended for other recipients via vectors involving access by the outbound messaging system to the RunTimeProfileCacheCmdImpl class, related to the caching of mutable objects and "concurrency issues."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg24028397; http://www-1.ibm.com/support/docview.wss?uid=swg1JR38114; http://www.securitytracker.com/id?1024845
CVE: CVE-2010-2761
Published: 2010-12-06
Description: The multipart_init function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier uses a hardcoded value of the MIME boundary string in multipart/x-mixed-replace content, which allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input that contains this value, a different vulnerability than CVE-2010-3172.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-94
References: http://cpansearch.perl.org/src/LDS/CGI.pm-3.50/Changes; http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705; http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735
CVE: CVE-2010-3066
Published: 2010-12-06
Description: The io_submit_one function in fs/aio.c in the Linux kernel before 2.6.23 allows local users to cause a denial of service (NULL pointer dereference) via a crafted io_submit system call with an IOCB_FLAG_RESFD flag.
CVSS Score: 4.9 (MEDIUM)
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=87e2831c3fa39cbf6f7ab676bb5aef039b9659e2; http://secunia.com/advisories/46397; http://securitytracker.com/id?1024708
CVE: CVE-2010-3449
Published: 2010-12-06
Description: Cross-site request forgery (CSRF) vulnerability in Redback before 1.2.4, as used in Apache Archiva 1.0 through 1.0.3, 1.1 through 1.1.4, 1.2 through 1.2.2, and 1.3 through 1.3.1; and Apache Continuum 1.3.6, 1.4.0, and 1.1 through 1.2.3.1; allows remote attackers to hijack the authentication of administrators for requests that modify credentials.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://archiva.apache.org/security.html; http://continuum.apache.org/security.html; http://jira.codehaus.org/browse/MRM-1438
CVE: CVE-2010-3904
Published: 2010-12-06
Description: The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.
CVSS Score: 7.8 (HIGH)
CWE: CWE-1284
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=799c10559d60f159ab2232203f222f18fa3c4a5f; http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00008.html; http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00004.html
CVE: CVE-2010-4408
Published: 2010-12-06
Description: Apache Archiva 1.0 through 1.0.3, 1.1 through 1.1.4, 1.2 through 1.2.2, and 1.3 through 1.3.1 does not require entry of the administrator's password at the time of modifying a user account, which makes it easier for context-dependent attackers to gain privileges by leveraging a (1) unattended workstation or (2) cross-site request forgery (CSRF) vulnerability, a related issue to CVE-2010-3449.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-79
References: http://archiva.apache.org/security.html; http://mail-archives.apache.org/mod_mbox/archiva-users/201011.mbox/ajax/%3CAANLkTimXejHAuXdoUKLN=GkNty1_XnRCbv0YA0T2cS_2%40mail.gmail.com%3E; http://www.securityfocus.com/archive/1/514937/100/0/threaded
CVE: CVE-2010-4409
Published: 2010-12-06
Description: Integer overflow in the NumberFormatter::getSymbol (aka numfmt_get_symbol) function in PHP 5.3.3 and earlier allows context-dependent attackers to cause a denial of service (application crash) via an invalid argument.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052836.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052845.html
CVE: CVE-2010-4410
Published: 2010-12-06
Description: CRLF injection vulnerability in the header function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via vectors related to non-whitespace characters preceded by newline characters, a different vulnerability than CVE-2010-2761 and CVE-2010-3172.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-94
References: http://cpansearch.perl.org/src/LDS/CGI.pm-3.50/Changes; http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705; http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735
CVE: CVE-2010-4411
Published: 2010-12-06
Description: Unspecified vulnerability in CGI.pm 3.50 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unknown vectors.  NOTE: this issue exists because of an incomplete fix for CVE-2010-2761.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053665.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053678.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE: CVE-2010-4180
Published: 2010-12-06
Description: OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
CVSS Score: 4.3 (MEDIUM)
References: http://cvs.openssl.org/chngview?cn=20131; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02794777; http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html
CVE: CVE-2010-4252
Published: 2010-12-06
Description: OpenSSL before 1.0.0c, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote attackers to bypass the need for knowledge of the shared secret, and successfully authenticate, by sending crafted values in each round of the protocol.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://cvs.openssl.org/chngview?cn=20098; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0544&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7577&w=2
CVE: CVE-2010-4294
Published: 2010-12-06
Description: The frame decompression functionality in the VMnc media codec in VMware Movie Decoder before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548, VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548 on Windows, VMware Player 2.5.x before 2.5.5 build 246459 and 3.x before 3.1.2 build 301548 on Windows, and VMware Server 2.x on Windows does not properly validate an unspecified size field, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted video file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://lists.vmware.com/pipermail/security-announce/2010/000112.html; http://osvdb.org/69596; http://secunia.com/advisories/42482
CVE: CVE-2010-4295
Published: 2010-12-06
Description: Race condition in the mounting process in vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101 allows host OS users to gain privileges via vectors involving temporary files.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-362
References: http://lists.vmware.com/pipermail/security-announce/2010/000112.html; http://osvdb.org/69585; http://secunia.com/advisories/42453
CVE: CVE-2010-4296
Published: 2010-12-06
Description: vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101 does not properly load libraries, which allows host OS users to gain privileges via vectors involving shared object files.
CVSS Score: 7.2 (HIGH)
CWE: CWE-863
References: http://lists.vmware.com/pipermail/security-announce/2010/000112.html; http://osvdb.org/69584; http://secunia.com/advisories/42453
CVE: CVE-2010-4297
Published: 2010-12-06
Description: The VMware Tools update functionality in VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548; VMware Player 2.5.x before 2.5.5 build 328052 and 3.1.x before 3.1.2 build 301548; VMware Server 2.0.2; VMware Fusion 2.x before 2.0.8 build 328035 and 3.1.x before 3.1.2 build 332101; VMware ESXi 3.5, 4.0, and 4.1; and VMware ESX 3.0.3, 3.5, 4.0, and 4.1 allows host OS users to gain privileges on the guest OS via unspecified vectors, related to a "command injection" issue.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://lists.vmware.com/pipermail/security-announce/2010/000112.html; http://osvdb.org/69590; http://secunia.com/advisories/42480