deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-0687
Published: 2013-04-18
Description: The installer routine in Schneider Electric MiCOM S1 Studio uses world-writable permissions for executable files, which allows local users to modify the service or the configuration files, and consequently gain privileges or trigger incorrect protective-relay operation, via a Trojan horse executable file.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-264
References: http://download.schneider-electric.com/files?p_File_Id=56543584&p_File_Name=SEVD-2013-087-01-MiCOM-S1-Studio-SW.pdf; http://ics-cert.us-cert.gov/pdf/ICSA-13-100-01.pdf; http://download.schneider-electric.com/files?p_File_Id=56543584&p_File_Name=SEVD-2013-087-01-MiCOM-S1-Studio-SW.pdf
CVE: CVE-2012-4715
Published: 2013-04-18
Description: Buffer overflow in LogReceiver.exe in Rockwell Automation RSLinx Enterprise CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a UDP packet with a certain integer length value that is (1) too large or (2) too small, leading to improper handling by Logger.dll.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://ics-cert.us-cert.gov/pdf/ICSA-13-095-02.pdf; https://rockwellautomation.custhelp.com/app/answers/detail/a_id/537599; http://ics-cert.us-cert.gov/pdf/ICSA-13-095-02.pdf
CVE: CVE-2013-1748
Published: 2013-04-18
Description: Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) edit.php or (2) import.php.  NOTE: the view.php id vector is already covered by CVE-2008-2565.1 and the edit.php id vector is already covered by CVE-2008-2565.2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://openwall.com/lists/oss-security/2013/04/17/2; http://openwall.com/lists/oss-security/2013/04/17/5; http://openwall.com/lists/oss-security/2013/04/17/2
CVE: CVE-2013-1749
Published: 2013-04-18
Description: Cross-site scripting (XSS) vulnerability in edit.php in PHP Address Book 8.2.5 allows user-assisted remote attackers to inject arbitrary web script or HTML via the Address field.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://openwall.com/lists/oss-security/2013/04/17/2; http://openwall.com/lists/oss-security/2013/04/17/2
CVE: CVE-2013-0132
Published: 2013-04-18
Description: The suexec implementation in Parallels Plesk Panel 11.0.9 contains a cgi-wrapper whitelist entry, which allows user-assisted remote attackers to execute arbitrary PHP code via a request containing crafted environment variables.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://www.kb.cert.org/vuls/id/310500; http://www.kb.cert.org/vuls/id/310500
CVE: CVE-2013-0133
Published: 2013-04-18
Description: Untrusted search path vulnerability in /usr/local/psa/admin/sbin/wrapper in Parallels Plesk Panel 11.0.9 allows local users to gain privileges via a crafted PATH environment variable.
CVSS Score: 7.2 (HIGH)
References: http://www.kb.cert.org/vuls/id/310500; http://www.kb.cert.org/vuls/id/310500
CVE: CVE-2013-0139
Published: 2013-04-18
Description: The Arecont Vision AV1355DN MegaDome camera allows remote attackers to cause a denial of service (video-capture outage) via a packet to UDP port 69.
CVSS Score: 7.8 (HIGH)
References: http://www.kb.cert.org/vuls/id/375180; http://www.kb.cert.org/vuls/id/375180
CVE: CVE-2013-1176
Published: 2013-04-18
Description: The DSP card on Cisco TelePresence MCU 4500 and 4501 devices before 4.3(2.30), TelePresence MCU MSE 8510 devices before 4.3(2.30), and TelePresence Server before 2.3(1.55) does not properly validate H.264 data, which allows remote attackers to cause a denial of service (device reload) via crafted RTP packets in a (1) SIP session or (2) H.323 session, aka Bug IDs CSCuc11328 and CSCub05448.
CVSS Score: 7.1 (HIGH)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130417-tpi; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130417-tpi
CVE: CVE-2013-1177
Published: 2013-04-18
Description: SQL injection vulnerability in Cisco Network Admission Control (NAC) Manager before 4.8.3.1 and 4.9.x before 4.9.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCub23095.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130417-nac; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130417-nac
CVE: CVE-2013-1194
Published: 2013-04-18
Description: The ISAKMP implementation on Cisco Adaptive Security Appliances (ASA) devices generates different responses for IKE aggressive-mode messages depending on whether invalid VPN groups are specified, which allows remote attackers to enumerate groups via a series of messages, aka Bug ID CSCue73708.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://archives.neohapsis.com/archives/bugtraq/2013-04/0198.html; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1194; http://archives.neohapsis.com/archives/bugtraq/2013-04/0198.html
CVE: CVE-2013-1199
Published: 2013-04-18
Description: Race condition in the CIFS implementation in the rewriter module in the Clientless SSL VPN component on Cisco Adaptive Security Appliances (ASA) devices allows remote authenticated users to cause a denial of service (device reload) by accessing resources within multiple sessions, aka Bug ID CSCub58996.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-362
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1199; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1199
CVE: CVE-2013-0129
Published: 2013-04-19
Description: Multiple cross-site scripting (XSS) vulnerabilities in pd-admin before 4.17 allow remote authenticated users to inject arbitrary web script or HTML via (1) the WebFTP Overview "Create new directory" field or (2) the body of an e-mail autoresponder message.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://www.kb.cert.org/vuls/id/311644; http://www.pdadmin-forum.de/thread.php?threadid=4051; http://www.kb.cert.org/vuls/id/311644
CVE: CVE-2013-1086
Published: 2013-04-19
Description: Cross-site scripting (XSS) vulnerability in WebAccess in Novell GroupWise before 8.0.3 HP3, and 2012 before SP2, allows remote attackers to inject arbitrary web script or HTML via vectors involving an onError attribute.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/53098; http://www.novell.com/support/kb/doc.php?id=7012064; https://bugzilla.novell.com/show_bug.cgi?id=802906
CVE: CVE-2013-1416
Published: 2013-04-19
Description: The prep_reprocess_req function in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10.5 does not properly perform service-principal realm referral, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted TGS-REQ request.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-476
References: http://krbdev.mit.edu/rt/Ticket/Display.html?id=7600; http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102058.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102074.html
CVE: CVE-2013-2697
Published: 2013-04-19
Description: Cross-site request forgery (CSRF) vulnerability in the WP-DownloadManager plugin before 1.61 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://secunia.com/advisories/52863; http://wordpress.org/extend/plugins/wp-downloadmanager/changelog/; http://secunia.com/advisories/52863
CVE: CVE-2013-3075
Published: 2013-04-19
Description: Multiple buffer overflows in ActUWzd.dll 1.0.0.1 in Mitsubishi MX Component 3, as distributed in Citect CitectFacilities 7.10 and CitectScada 7.10r1, allow remote attackers to execute arbitrary code via a long string, as demonstrated by a long WzTitle property value to a certain ActiveX control.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.exploit-db.com/exploits/24886/; http://www.exploit-db.com/exploits/24886/
CVE: CVE-2013-3210
Published: 2013-04-19
Description: Opera before 12.15 does not properly block top-level domains in Set-Cookie headers, which allows remote attackers to obtain sensitive information by leveraging control of a different web site in the same top-level domain.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.opera.com/docs/changelogs/unified/1215/; http://www.opera.com/security/advisory/1047; http://www.opera.com/docs/changelogs/unified/1215/
CVE: CVE-2013-3211
Published: 2013-04-19
Description: Unspecified vulnerability in Opera before 12.15 has unknown impact and attack vectors, related to a "moderately severe issue."
CVSS Score: 10.0 (HIGH)
References: http://www.opera.com/docs/changelogs/unified/1215/; http://www.opera.com/docs/changelogs/unified/1215/
CVE: CVE-2012-6092
Published: 2013-04-21
Description: Multiple cross-site scripting (XSS) vulnerabilities in the web demos in Apache ActiveMQ before 5.8.0 allow remote attackers to inject arbitrary web script or HTML via (1) the refresh parameter to PortfolioPublishServlet.java (aka demo/portfolioPublish or Market Data Publisher), or vectors involving (2) debug logs or (3) subscribe messages in webapp/websocket/chat.js.  NOTE: AMQ-4124 is covered by CVE-2012-6551.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://activemq.apache.org/activemq-580-release.html; http://rhn.redhat.com/errata/RHSA-2013-1029.html; http://www.securityfocus.com/bid/59400
CVE: CVE-2012-6551
Published: 2013-04-21
Description: The default configuration of Apache ActiveMQ before 5.8.0 enables a sample web application, which allows remote attackers to cause a denial of service (broker resource consumption) via HTTP requests.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://activemq.2283324.n4.nabble.com/DISCUSS-ActiveMQ-out-of-the-box-Should-not-include-the-demos-tc4658044.html; http://activemq.apache.org/activemq-580-release.html; http://rhn.redhat.com/errata/RHSA-2013-1029.html
CVE: CVE-2013-3060
Published: 2013-04-21
Description: The web console in Apache ActiveMQ before 5.8.0 does not require authentication, which allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-287
References: http://activemq.2283324.n4.nabble.com/DISCUSS-ActiveMQ-out-of-the-box-Should-not-include-the-demos-tc4658044.html; http://activemq.apache.org/activemq-580-release.html; http://rhn.redhat.com/errata/RHSA-2013-1029.html
CVE: CVE-2013-0122
Published: 2013-04-22
Description: The avast! Mobile Security application before 2.0.4400 for Android allows attackers to cause a denial of service (application crash) via a crafted application that sends an intent to com.avast.android.mobilesecurity.app.scanner.DeleteFileActivity with zero arguments.
CVSS Score: 1.9 (LOW)
CWE: CWE-20
References: http://www.kb.cert.org/vuls/id/131263; http://www.kb.cert.org/vuls/id/131263
CVE: CVE-2013-0138
Published: 2013-04-22
Description: BitZipper 2013 before Update 1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted ZIP archive.
CVSS Score: 9.3 (HIGH)
References: http://www.kb.cert.org/vuls/id/880916; http://www.kb.cert.org/vuls/id/BLUU-95GP23; http://www.kb.cert.org/vuls/id/880916
CVE: CVE-2013-0700
Published: 2013-04-22
Description: Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to cause a denial of service (defect-mode transition and control outage) via crafted packets to TCP port 102 (aka the ISO-TSAP port).
CVSS Score: 7.8 (HIGH)
References: http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-724606.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-724606.pdf; http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-724606.pdf
CVE: CVE-2013-2780
Published: 2013-04-22
Description: Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to cause a denial of service (defect-mode transition and control outage) via crafted packets to UDP port 161 (aka the SNMP port).
CVSS Score: 7.8 (HIGH)
References: http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-724606.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-724606.pdf; http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-724606.pdf
CVE: CVE-2013-3221
Published: 2013-04-22
Description: The Active Record component in Ruby on Rails 2.3.x, 3.0.x, 3.1.x, and 3.2.x does not ensure that the declared data type of a database column is used during comparisons of input values to stored values in that column, which makes it easier for remote attackers to conduct data-type injection attacks against Ruby on Rails applications via a crafted value, as demonstrated by unintended interaction between the "typed XML" feature and a MySQL database.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-20
References: http://openwall.com/lists/oss-security/2013/02/06/7; http://openwall.com/lists/oss-security/2013/04/24/7; http://pl.reddit.com/r/netsec/comments/17yajp/mysql_madness_and_rails/
CVE: CVE-2013-3076
Published: 2013-04-22
Description: The crypto API in the Linux kernel through 3.9-rc8 does not initialize certain length variables, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call, related to the hash_recvmsg function in crypto/algif_hash.c and the skcipher_recvmsg function in crypto/algif_skcipher.c.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103750.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104480.html; http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html
CVE: CVE-2013-3222
Published: 2013-04-22
Description: The vcc_recvmsg function in net/atm/common.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9b3e617f3df53822345a8573b6d358f6b9e5ed87; http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103750.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104480.html
CVE: CVE-2013-3223
Published: 2013-04-22
Description: The ax25_recvmsg function in net/ax25/af_ax25.c in the Linux kernel before 3.9-rc7 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ef3313e84acbf349caecae942ab3ab731471f1a1; http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103750.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104480.html
CVE: CVE-2013-3224
Published: 2013-04-22
Description: The bt_sock_recvmsg function in net/bluetooth/af_bluetooth.c in the Linux kernel before 3.9-rc7 does not properly initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4683f42fde3977bdb4e8a09622788cc8b5313778; http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103750.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104480.html
CVE: CVE-2013-3225
Published: 2013-04-22
Description: The rfcomm_sock_recvmsg function in net/bluetooth/rfcomm/sock.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e11e0455c0d7d3d62276a0c55d9dfbc16779d691; http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103750.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104480.html
CVE: CVE-2013-3226
Published: 2013-04-22
Description: The sco_sock_recvmsg function in net/bluetooth/sco.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c8c499175f7d295ef867335bceb9a76a2c3cdc38; http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html; http://www.openwall.com/lists/oss-security/2013/04/14/3
CVE: CVE-2013-3227
Published: 2013-04-22
Description: The caif_seqpkt_recvmsg function in net/caif/caif_socket.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2d6fbfe733f35c6b355c216644e08e149c61b271; http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html; http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html
CVE: CVE-2013-3228
Published: 2013-04-22
Description: The irda_recvmsg_dgram function in net/irda/af_irda.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5ae94c0d2f0bed41d6718be743985d61b7f5c47d; http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103750.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104480.html
CVE: CVE-2013-3229
Published: 2013-04-22
Description: The iucv_sock_recvmsg function in net/iucv/af_iucv.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a5598bd9c087dc0efc250a5221e5d0e6f584ee88; http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html; http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html
CVE: CVE-2013-3230
Published: 2013-04-22
Description: The l2tp_ip6_recvmsg function in net/l2tp/l2tp_ip6.c in the Linux kernel before 3.9-rc7 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b860d3cc62877fad02863e2a08efff69a19382d2; http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103750.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104480.html
CVE: CVE-2013-3231
Published: 2013-04-22
Description: The llc_ui_recvmsg function in net/llc/af_llc.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c77a4b9cffb6215a15196ec499490d116dfad181; http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103750.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104480.html
CVE: CVE-2013-3232
Published: 2013-04-22
Description: The nr_recvmsg function in net/netrom/af_netrom.c in the Linux kernel before 3.9-rc7 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3ce5efad47b62c57a4f5c[PII_REDACTED]5a750ce0e; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c802d759623acbd6e1ee9fbdabae89159a513913; http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103750.html
CVE: CVE-2013-3233
Published: 2013-04-22
Description: The llcp_sock_recvmsg function in net/nfc/llcp/sock.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable and a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d26d6504f23e803824e8ebd14e52d4fc0a0b09cb; http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103750.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104480.html
CVE: CVE-2013-3234
Published: 2013-04-22
Description: The rose_recvmsg function in net/rose/af_rose.c in the Linux kernel before 3.9-rc7 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4a184233f21645cf0b719366210ed445d1024d72; http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103750.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104480.html
CVE: CVE-2013-3235
Published: 2013-04-22
Description: net/tipc/socket.c in the Linux kernel before 3.9-rc7 does not initialize a certain data structure and a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=60085c3d009b0df252547adb336d1ccca5ce52ec; http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html; http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html
CVE: CVE-2013-3236
Published: 2013-04-22
Description: The vmci_transport_dgram_dequeue function in net/vmw_vsock/vmci_transport.c in the Linux kernel before 3.9-rc7 does not properly initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=680d04e0ba7e926233e3b9cee59125ce181f66ba; http://www.openwall.com/lists/oss-security/2013/04/14/3; http://www.openwall.com/lists/oss-security/2013/04/22/11