deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-4778
Published: 2012-01-03
Description: Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk 4.2.x before 4.2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka SPL-44614.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securitytracker.com/id?1026451; http://www.splunk.com/view/SP-CAAAGMM; http://www.securitytracker.com/id?1026451
CVE: CVE-2011-4197
Published: 2012-01-03
Description: etc/inc/certs.inc in the PKI implementation in pfSense before 2.0.1 creates each X.509 certificate with a true value for the CA basic constraint, which allows remote attackers to create sub-certificates for arbitrary subjects by leveraging the private key.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://archives.neohapsis.com/archives/bugtraq/2011-12/0152.html; http://secunia.com/advisories/46780; http://www.osvdb.org/77982
CVE: CVE-2011-5047
Published: 2012-01-03
Description: Cross-site scripting (XSS) vulnerability in status_rrd_graph.php in pfSense before 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the style parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://blog.pfsense.org/?p=633; http://secunia.com/advisories/46780; http://www.osvdb.org/77981
CVE: CVE-2011-5048
Published: 2012-01-03
Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM Web Experience Factory (aka WEF, formerly WebSphere Portlet Factory) 7.0 and 7.0.1 allow remote attackers to inject arbitrary web script or HTML via a (1) text INPUT element or (2) TEXTAREA element, related to an interaction between Smart Refresh and Dojo.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg1LO65984; http://www-01.ibm.com/support/docview.wss?uid=swg1LO65985; http://www-01.ibm.com/support/docview.wss?uid=swg21575083
CVE: CVE-2011-1384
Published: 2012-01-04
Description: The (1) bin/invscoutClient_VPD_Survey and (2) sbin/invscout_lsvpd programs in invscout.rte before 2.2.0.19 on IBM AIX 7.1, 6.1, 5.3, and earlier allow local users to delete arbitrary files, or trigger inventory scout operations on arbitrary files, via a symlink attack on an unspecified file.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-59
References: http://aix.software.ibm.com/aix/efixes/security/invscout_advisory2.asc; http://secunia.com/advisories/47222; http://www-01.ibm.com/support/docview.wss?uid=isg1IV11643
CVE: CVE-2011-1386
Published: 2012-01-04
Description: IBM Tivoli Federated Identity Manager (TFIM) and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.1.1, 6.2.0, and 6.2.1 do not properly handle signature validations based on SAML 1.0, 1.1, and 2.0, which allows remote attackers to bypass intended authentication or authorization requirements via a non-conforming SAML signature.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IV10793; http://www-01.ibm.com/support/docview.wss?uid=swg1IV10801; http://www-01.ibm.com/support/docview.wss?uid=swg1IV10813
CVE: CVE-2011-3337
Published: 2012-01-04
Description: eEye Audit ID 2499 in eEye Digital Security Audits 2406 through 2423 for eEye Retina Network Security Scanner on HP-UX, IRIX, and Solaris allows local users to gain privileges via a Trojan horse gauntlet program in an arbitrary directory under /usr/local/.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-264
References: http://www.eeye.com/Resources/Security-Center/Research/Security-Advisories/AL20111108; http://www.kb.cert.org/vuls/id/448051; http://www.eeye.com/Resources/Security-Center/Research/Security-Advisories/AL20111108
CVE: CVE-2012-0026
Published: 2012-01-04
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-0287.  Reason: This candidate is a duplicate of CVE-2012-0287.  Notes: All CVE users should reference CVE-2012-0287 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2007-6751
Published: 2012-01-04
Description: Cross-site scripting (XSS) vulnerability in the MailForm plugin before 1.20 for Movable Type allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN60887968/index.html; http://jvndb.jvn.jp/en/contents/2011/JVNDB-2011-000108.html; http://www.h-fj.com/blog/archives/2007/01/23-111038.php
CVE: CVE-2011-4920
Published: 2012-01-04
Description: Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.26, and other versions before 1.0.0, allow remote attackers to inject arbitrary web script or HTML via the URL to (1) e107_images/thumb.php or (2) rate.php, (3) resend_name parameter to e107_admin/users.php, and (4) link BBCode in user signatures.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/78047; http://osvdb.org/78048; http://osvdb.org/78049
CVE: CVE-2011-4921
Published: 2012-01-04
Description: SQL injection vulnerability in usersettings.php in e107 0.7.26, and possibly other versions before 1.0.0, allows remote attackers to execute arbitrary SQL commands via the username parameter.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-89
References: http://osvdb.org/78050; http://secunia.com/advisories/46706; http://www.openwall.com/lists/oss-security/2012/01/04/3
CVE: CVE-2011-5049
Published: 2012-01-04
Description: MySQL 5.5.8, when running on Windows, allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted packet to TCP port 3306.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://www.exploit-db.com/exploits/18269; https://exchange.xforce.ibmcloud.com/vulnerabilities/71965; http://www.exploit-db.com/exploits/18269
CVE: CVE-2011-5050
Published: 2012-01-04
Description: SQL injection vulnerability in corporate/Controller in Elitecore Technologies Cyberoam UTM before 10.01.2 build 059 allows remote authenticated administrators to execute arbitrary SQL commands via the tableid parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-89
References: http://osvdb.org/77986; http://secunia.com/advisories/47304; http://www.vulnerability-lab.com/get_content.php?id=60
CVE: CVE-2011-5051
Published: 2012-01-04
Description: Multiple unrestricted file upload vulnerabilities in the WP Symposium plugin before 11.12.24 for WordPress allow remote attackers to execute arbitrary code by uploading a file with an executable extension using (1) uploadify/upload_admin_avatar.php or (2) uploadify/upload_profile_avatar.php, then accessing it via a direct request to the file in an unspecified directory inside the webroot.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/78041; http://osvdb.org/78042; http://secunia.com/advisories/46097
CVE: CVE-2011-5052
Published: 2012-01-04
Description: Stack-based buffer overflow in CoCSoft Stream Down 6.8.0 allows remote web servers to execute arbitrary code via a long response to a download request.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://osvdb.org/78043; http://secunia.com/advisories/47343; http://www.exploit-db.com/exploits/18283
CVE: CVE-2011-4905
Published: 2012-01-05
Description: Apache ActiveMQ before 5.6.0 allows remote attackers to cause a denial of service (file-descriptor exhaustion and broker crash or hang) by sending many openwire failover:tcp:// connection requests.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://openwall.com/lists/oss-security/2011/12/25/2; http://openwall.com/lists/oss-security/2011/12/25/6; http://secunia.com/advisories/47112
CVE: CVE-2011-5019
Published: 2012-01-05
Description: Cross-site scripting (XSS) vulnerability in setup/index.php in Textpattern CMS 4.4.1, when the product is incompletely installed, allows remote attackers to inject arbitrary web script or HTML via the ddb parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2012-01/0018.html; http://www.securityfocus.com/bid/51254; https://exchange.xforce.ibmcloud.com/vulnerabilities/72102
CVE: CVE-2011-4858
Published: 2012-01-05
Description: Apache Tomcat before 5.5.35, 6.x before 6.0.35, and 7.x before 7.0.23 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://mail-archives.apache.org/mod_mbox/tomcat-announce/201112.mbox/%3c4EFB9[PII_REDACTED]%40apache.org%3e; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7248&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8746&w=2
CVE: CVE-2011-4108
Published: 2012-01-06
Description: The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is valid, which makes it easier for remote attackers to recover plaintext via a padding oracle attack.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041; http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html
CVE: CVE-2011-4109
Published: 2012-01-06
Description: Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK is enabled, allows remote attackers to have an unspecified impact by triggering failure of a policy check.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc; http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00018.html
CVE: CVE-2011-4576
Published: 2012-01-06
Description: The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padding, which might allow remote attackers to obtain sensitive information by decrypting the padding data sent by an SSL peer.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041; http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html
CVE: CVE-2011-4577
Published: 2012-01-06
Description: OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service (assertion failure) via an X.509 certificate containing certificate-extension data associated with (1) IP address blocks or (2) Autonomous System (AS) identifiers.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041; http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html
CVE: CVE-2011-4619
Published: 2012-01-06
Description: The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041; http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html
CVE: CVE-2012-0027
Published: 2012-01-06
Description: The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote attackers to cause a denial of service (daemon crash) via crafted data from a TLS client.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041; http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00017.html; http://osvdb.org/78191
CVE: CVE-2012-0390
Published: 2012-01-06
Description: The DTLS implementation in GnuTLS 3.0.10 and earlier executes certain error-handling code only if there is a specific relationship between a padding length and the ciphertext size, which makes it easier for remote attackers to recover partial plaintext via a timing side-channel attack, a related issue to CVE-2011-4108.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html; http://secunia.com/advisories/57260; http://www.isg.rhul.ac.uk/~kp/dtls.pdf
CVE: CVE-2011-4616
Published: 2012-01-06
Description: Cross-site scripting (XSS) vulnerability in the HTML-Template-Pro module before 0.9507 for Perl allows remote attackers to inject arbitrary web script or HTML via template parameters, related to improper handling of > (greater than) and < (less than) characters.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652587; http://cpansearch.perl.org/src/VIY/HTML-Template-Pro-0.9507/Changes; http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089603.html
CVE: CVE-2012-0287
Published: 2012-01-06
Description: Cross-site scripting (XSS) vulnerability in wp-comments-post.php in WordPress 3.3.x before 3.3.1, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the query string in a POST operation that is not properly handled by the "Duplicate comment detected" feature.
CVSS Score: 2.6 (LOW)
CWE: CWE-79
References: http://oldmanlab.blogspot.com/2012/01/wordpress-33-xss-vulnerability.html; http://www.securityfocus.com/bid/51237; http://www.securitytracker.com/id?1026542
CVE: CVE-2011-5053
Published: 2012-01-06
Description: The Wi-Fi Protected Setup (WPS) protocol, when the "external registrar" authentication method is used, does not properly inform clients about failed PIN authentication, which makes it easier for remote attackers to discover the PIN value, and consequently discover the Wi-Fi network password or reconfigure an access point, by reading EAP-NACK messages.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-287
References: http://code.google.com/p/reaver-wps/; http://sviehb.files.wordpress.com/2011/12/viehboeck_wps.pdf; http://sviehb.wordpress.com/2011/12/27/wi-fi-protected-setup-pin-brute-force-vulnerability/
CVE: CVE-2011-5054
Published: 2012-01-06
Description: kcheckpass passes a user-supplied argument to the pam_start function, often within a setuid environment, which allows local users to invoke any configured PAM stack, and possibly trigger unintended side effects, via an arbitrary valid PAM service name, a different vulnerability than CVE-2011-4122.  NOTE: the vendor indicates that the possibility of resultant privilege escalation may be "a bit far-fetched."
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-287
References: http://c-skills.blogspot.com/2011/11/openpam-trickery.html; http://openwall.com/lists/oss-security/2011/12/07/3; http://openwall.com/lists/oss-security/2011/12/08/9
CVE: CVE-2011-3919
Published: 2012-01-07
Description: Heap-based buffer overflow in libxml2, as used in Google Chrome before 16.0.912.75, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://code.google.com/p/chromium/issues/detail?id=107128; http://googlechromereleases.blogspot.com/2012/01/stable-channel-update.html; http://lists.apple.com/archives/security-announce/2012/May/msg00001.html
CVE: CVE-2011-3921
Published: 2012-01-07
Description: Use-after-free vulnerability in Google Chrome before 16.0.912.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving animation frames.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=106672; http://googlechromereleases.blogspot.com/2012/01/stable-channel-update.html; http://secunia.com/advisories/47449
CVE: CVE-2011-3922
Published: 2012-01-07
Description: Stack-based buffer overflow in Google Chrome before 16.0.912.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to glyph handling.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://code.google.com/p/chromium/issues/detail?id=108006; http://googlechromereleases.blogspot.com/2012/01/stable-channel-update.html; http://secunia.com/advisories/47449
CVE: CVE-2011-3206
Published: 2012-01-08
Description: Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in RHQ 4.2.0, as used in JBoss Operations Network (aka JON or JBoss ON) before 3.0, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://rhn.redhat.com/errata/RHSA-2012-0089.html; http://secunia.com/advisories/47197; http://secunia.com/advisories/47280
CVE: CVE-2011-4055
Published: 2012-01-08
Description: Buffer overflow in the WebClient ActiveX control in Siemens Tecnomatix FactoryLink 6.6.1 (aka 6.6 SP1), 7.5.217 (aka 7.5 SP2), and 8.0.2.54 allows remote attackers to execute arbitrary code via a long string in a parameter associated with the location URL.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/51266; http://www.us-cert.gov/control_systems/pdf/ICSA-11-343-01.pdf; http://www.usdata.com/sea/factorylink/en/p_nav5.asp
CVE: CVE-2011-4056
Published: 2012-01-08
Description: An unspecified ActiveX control in ActBar.ocx in Siemens Tecnomatix FactoryLink 6.6.1 (aka 6.6 SP1), 7.5.217 (aka 7.5 SP2), and 8.0.2.54 allows remote attackers to create or overwrite arbitrary files via the save method.
CVSS Score: 5.8 (MEDIUM)
References: http://www.us-cert.gov/control_systems/pdf/ICSA-11-343-01.pdf; http://www.usdata.com/sea/factorylink/en/p_nav5.asp; http://www.us-cert.gov/control_systems/pdf/ICSA-11-343-01.pdf
CVE: CVE-2011-4870
Published: 2012-01-08
Description: Multiple buffer overflows in the (1) GUIControls, (2) BatchObjSrv, and (3) BatchSecCtrl ActiveX controls in Invensys Wonderware InBatch 9.0 and 9.0 SP1, and InBatch 8.1 SP1, 9.0 SP2, and 9.5 Server and Runtime Clients, allow remote attackers to execute arbitrary code via a long string in a property value, a different issue than CVE-2011-3141.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/51129; http://www.us-cert.gov/control_systems/pdf/ICSA-11-332-01A.pdf; http://www.securityfocus.com/bid/51129
CVE: CVE-2011-5055
Published: 2012-01-08
Description: MaraDNS 1.3.07.12 and 1.4.08 computes hash values for DNS data without properly restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted queries with the Recursion Desired (RD) bit set.  NOTE: this issue exists because of an incomplete fix for CVE-2012-0024.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://openwall.com/lists/oss-security/2012/01/03/13; http://openwall.com/lists/oss-security/2012/01/03/6; http://samiam.org/blog/20111230.html
CVE: CVE-2011-5056
Published: 2012-01-08
Description: The authoritative server in MaraDNS through 2.0.04 computes hash values for DNS data without restricting the ability to trigger hash collisions predictably, which might allow local users to cause a denial of service (CPU consumption) via crafted records in zone files, a different vulnerability than CVE-2012-0024.
CVSS Score: 2.1 (LOW)
CWE: CWE-400
References: http://samiam.org/blog/20111229.html; http://www.securitytracker.com/id?1026820; https://exchange.xforce.ibmcloud.com/vulnerabilities/72258
CVE: CVE-2012-0024
Published: 2012-01-08
Description: MaraDNS before 1.3.07.12 and 1.4.x before 1.4.08 computes hash values for DNS data without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted queries with the Recursion Desired (RD) bit set.
CVSS Score: 7.8 (HIGH)
CWE: CWE-400
References: http://openwall.com/lists/oss-security/2012/01/03/13; http://openwall.com/lists/oss-security/2012/01/03/6; http://samiam.org/blog/20111229.html
CVE: CVE-2011-4360
Published: 2012-01-08
Description: MediaWiki before 1.17.1 allows remote attackers to obtain the page titles of all restricted pages via a series of requests involving the (1) curid or (2) oldid parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-November/000104.html; http://openwall.com/lists/oss-security/2011/11/29/12; http://openwall.com/lists/oss-security/2011/11/29/6
CVE: CVE-2011-4361
Published: 2012-01-08
Description: MediaWiki before 1.17.1 does not check for read permission before handling action=ajax requests, which allows remote attackers to obtain sensitive information by (1) leveraging the SpecialUpload::ajaxGetExistsWarning function, or by (2) leveraging an extension, as demonstrated by the CategoryTree, ExtTab, and InlineEditor extensions.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-276
References: http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-November/000104.html; http://openwall.com/lists/oss-security/2011/11/29/12; http://openwall.com/lists/oss-security/2011/11/29/6
CVE: CVE-2012-0391
Published: 2012-01-08
Description: The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during certain exception handling for mismatched data types of properties, which allows remote attackers to execute arbitrary Java code via a crafted parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-94
References: http://archives.neohapsis.com/archives/bugtraq/2012-01/0031.html; http://secunia.com/advisories/47393; http://struts.apache.org/2.x/docs/s2-008.html
CVE: CVE-2012-0392
Published: 2012-01-08
Description: The CookieInterceptor component in Apache Struts before 2.3.1.1 does not use the parameter-name whitelist, which allows remote attackers to execute arbitrary commands via a crafted HTTP Cookie header that triggers Java code execution through a static method.
CVSS Score: 6.8 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2012-01/0031.html; http://secunia.com/advisories/47393; http://struts.apache.org/2.x/docs/s2-008.html
CVE: CVE-2012-0393
Published: 2012-01-08
Description: The ParameterInterceptor component in Apache Struts before 2.3.1.1 does not prevent access to public constructors, which allows remote attackers to create or overwrite arbitrary files via a crafted parameter that triggers the creation of a Java object.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-264
References: http://archives.neohapsis.com/archives/bugtraq/2012-01/0031.html; http://secunia.com/advisories/47393; http://struts.apache.org/2.x/docs/s2-008.html
CVE: CVE-2012-0394
Published: 2012-01-08
Description: The DebuggingInterceptor component in Apache Struts before 2.3.1.1, when developer mode is used, allows remote attackers to execute arbitrary commands via unspecified vectors.  NOTE: the vendor characterizes this behavior as not "a security vulnerability itself.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://archives.neohapsis.com/archives/bugtraq/2012-01/0031.html; http://struts.apache.org/2.x/docs/s2-008.html; http://struts.apache.org/2.x/docs/version-notes-2311.html
CVE: CVE-2011-5057
Published: 2012-01-08
Description: Apache Struts 2.3.1.2 and earlier, 2.3.19-2.3.23, provides interfaces that do not properly restrict access to collections such as the session and request collections, which might allow remote attackers to modify run-time data values via a crafted parameter to an application that implements an affected interface, as demonstrated by the SessionAware, RequestAware, ApplicationAware, ServletRequestAware, ServletResponseAware, and ParameterAware interfaces. NOTE: the vendor disputes the significance of this report because of an "easy work-around in existing apps by configuring the interceptor."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://codesecure.blogspot.com/2011/12/struts-2-session-tampering-via.html; http://secunia.com/advisories/47109; https://issues.apache.org/jira/browse/WW-2264