deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-1910
Published: 2011-05-31
Description: Off-by-one error in named in ISC BIND 9.x before 9.7.3-P1, 9.8.x before 9.8.0-P2, 9.4-ESV before 9.4-ESV-R4-P1, and 9.6-ESV before 9.6-ESV-R4-P1 allows remote DNS servers to cause a denial of service (assertion failure and daemon exit) via a negative response containing large RRSIG RRsets.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-189
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061082.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061401.html
CVE: CVE-2011-1922
Published: 2011-05-31
Description: daemon/worker.c in Unbound 1.x before 1.4.10, when debugging functionality and the interface-automatic option are enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted DNS request that triggers improper error handling.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061243.html; http://osvdb.org/72750; http://secunia.com/advisories/44865
CVE: CVE-2011-1925
Published: 2011-05-31
Description: nbd-server.c in Network Block Device (nbd-server) 2.9.21 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by causing a negotiation failure, as demonstrated by specifying a name for a non-existent export.
CVSS Score: 5.0 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=627042.; http://nbd.git.sourceforge.net/git/gitweb.cgi?p=nbd/nbd%3Ba=commitdiff%3Bh=ebbbe0b3ce5393fa42a259f5e03d549508586aaa; http://security.gentoo.org/glsa/glsa-201206-35.xml
CVE: CVE-2011-1937
Published: 2011-05-31
Description: Cross-site scripting (XSS) vulnerability in Webmin 1.540 and earlier allows local users to inject arbitrary web script or HTML via a chfn command that changes the real (aka Full Name) field, related to useradmin/index.cgi and useradmin/user-lib.pl.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://javierb.com.ar/2011/04/24/xss-webmin-1-540/; http://openwall.com/lists/oss-security/2011/05/22/1; http://openwall.com/lists/oss-security/2011/05/24/7
CVE: CVE-2011-1938
Published: 2011-05-31
Description: Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependent attackers to execute arbitrary code via a long pathname for a UNIX socket.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2507&w=2; http://openwall.com/lists/oss-security/2011/05/24/1
CVE: CVE-2011-1945
Published: 2011-05-31
Description: The elliptic curve cryptography (ECC) subsystem in OpenSSL 1.0.0d and earlier, when the Elliptic Curve Digital Signature Algorithm (ECDSA) is used for the ECDHE_ECDSA cipher suite, does not properly implement curves over binary fields, which makes it easier for context-dependent attackers to determine private keys via a timing attack and a lattice calculation.
CVSS Score: 2.6 (LOW)
CWE: CWE-310
References: http://eprint.iacr.org/2011/232.pdf; http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html; http://secunia.com/advisories/44935
CVE: CVE-2011-2214
Published: 2011-05-31
Description: Unspecified vulnerability in the Open Database Connectivity (ODBC) component in 7T Interactive Graphical SCADA System (IGSS) before 9.0.0.11143 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 20222, which triggers memory corruption related to an "invalid structure being used."
CVSS Score: 10.0 (HIGH)
References: http://securityreason.com/securityalert/8265; http://www.securityfocus.com/archive/1/518110/100/0/threaded; http://www.securityfocus.com/bid/47960
CVE: CVE-2011-2215
Published: 2011-05-31
Description: Unspecified vulnerability in WalRack 1.x before 1.1.8 and 2.x before 2.0.6 has unknown impact and attack vectors, possibly related to file deletion and an encoded URL, a different vulnerability than CVE-2011-1329.
CVSS Score: 7.5 (HIGH)
References: http://digit.que.ne.jp/work/index.cgi?WalRack; http://digit.que.ne.jp/work/index.cgi?WalRack2; http://www.securityfocus.com/bid/48097
CVE: CVE-2011-0730
Published: 2011-06-02
Description: Eucalyptus before 2.0.3 and Eucalyptus EE before 2.0.2, as used in Ubuntu Enterprise Cloud (UEC) and other products, do not properly interpret signed elements in SOAP requests, which allows man-in-the-middle attackers to execute arbitrary commands by modifying a request, related to an "XML Signature Element Wrapping" or a "SOAP signature replay" issue.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://launchpadlibrarian.net/72472626/eucalyptus_2.0.1%2Bbzr1256-0ubuntu5_2.0.1%2Bbzr1256-0ubuntu6.diff.gz; http://open.eucalyptus.com/wiki/esa-02; http://secunia.com/advisories/44705
CVE: CVE-2011-1947
Published: 2011-06-02
Description: fetchmail 5.9.9 through 6.3.19 does not properly limit the wait time after issuing a (1) STARTTLS or (2) STLS request, which allows remote servers to cause a denial of service (application hang) by acknowledging the request but not sending additional packets.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://gitorious.org/fetchmail/fetchmail/blobs/legacy_63/fetchmail-SA-2011-01.txt; http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061634.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061672.html
CVE: CVE-2011-2039
Published: 2011-06-02
Description: The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.185 on Windows, and on Windows Mobile, downloads a client executable file (vpndownloader.exe) without verifying its authenticity, which allows remote attackers to execute arbitrary code via the url property to a certain ActiveX control in vpnweb.ocx, aka Bug ID CSCsy00904.
CVSS Score: 7.6 (HIGH)
CWE: CWE-20
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=909; http://osvdb.org/72714; http://securityreason.com/securityalert/8272
CVE: CVE-2011-2040
Published: 2011-06-02
Description: The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.5.3041, and 3.0.x before 3.0.629, on Linux and Mac OS X downloads a client executable file (vpndownloader.exe) without verifying its authenticity, which allows remote attackers to execute arbitrary code via the url property to a Java applet, aka Bug ID CSCsy05934.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=910; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80123.shtml; http://www.kb.cert.org/vuls/id/490097
CVE: CVE-2009-4008
Published: 2011-06-02
Description: Unbound before 1.4.4 does not send responses for signed zones after mishandling an unspecified query, which allows remote attackers to cause a denial of service (DNSSEC outage) via a crafted query.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://packages.debian.org/changelogs/pool/main/u/unbound/unbound_1.4.6-1/changelog; http://unbound.nlnetlabs.nl/downloads/unbound-1.4.4.tar.gz; http://www.debian.org/security/2011/dsa-2243
CVE: CVE-2011-1026
Published: 2011-06-02
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Apache Archiva 1.0 through 1.2.2, and 1.3.x before 1.3.5, allow remote attackers to hijack the authentication of administrators.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://archiva.apache.org/docs/1.3.5/release-notes.html; http://archiva.apache.org/security.html; http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0532.html
CVE: CVE-2011-1077
Published: 2011-06-02
Description: Multiple cross-site scripting (XSS) vulnerabilities in Apache Archiva 1.0 through 1.2.2, and 1.3.x before 1.3.5, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archiva.apache.org/docs/1.3.5/release-notes.html; http://archiva.apache.org/security.html; http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0531.html
CVE: CVE-2011-1220
Published: 2011-06-02
Description: Stack-based buffer overflow in lcfd.exe in Tivoli Endpoint in IBM Tivoli Management Framework 3.7.1, 4.1, 4.1.1, and 4.3.1 allows remote authenticated users to execute arbitrary code via a long opts field.
CVSS Score: 9.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/44628; http://securityreason.com/securityalert/8268; http://securitytracker.com/id?1025581
CVE: CVE-2011-1602
Published: 2011-06-02
Description: The su utility on Cisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.0.3 allows local users to gain privileges via unspecified vectors, aka Bug ID CSCtf07426.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/72717; http://secunia.com/advisories/44814/; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80111.shtml
CVE: CVE-2011-1603
Published: 2011-06-02
Description: Cisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.2.1 allow local users to gain privileges via unspecified vectors, aka Bug ID CSCtn65815.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/72718; http://secunia.com/advisories/44814/; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80111.shtml
CVE: CVE-2011-1623
Published: 2011-06-02
Description: Cisco Media Processing Software before 1.2 on Media Experience Engine (MXE) 5600 devices has a default root password, which makes it easier for context-dependent attackers to obtain access via (1) the local console, (2) an SSH session, or (3) a TELNET session, aka Bug ID CSCto77737.
CVSS Score: 10.0 (HIGH)
CWE: CWE-255
References: http://osvdb.org/72721; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80122.shtml; http://www.securityfocus.com/bid/48078
CVE: CVE-2011-1637
Published: 2011-06-02
Description: Cisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.2.1 do not properly verify signatures for software images, which allows local users to gain privileges via a crafted image, aka Bug ID CSCtn65962.
CVSS Score: 1.5 (LOW)
CWE: CWE-264
References: http://osvdb.org/72719; http://secunia.com/advisories/44814/; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80111.shtml
CVE: CVE-2011-2024
Published: 2011-06-02
Description: Cisco Network Registrar before 7.2 has a default administrative password, which makes it easier for remote attackers to obtain access via a TCP session, aka Bug ID CSCsm50627.
CVSS Score: 10.0 (HIGH)
CWE: CWE-255
References: http://osvdb.org/72720; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80121.shtml; http://www.securityfocus.com/bid/48076
CVE: CVE-2011-2041
Published: 2011-06-02
Description: The Start Before Logon (SBL) functionality in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.254 on Windows, and on Windows Mobile, allows local users to gain privileges via unspecified user-interface interaction, aka Bug ID CSCta40556.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://osvdb.org/72716; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80123.shtml; http://www.securityfocus.com/bid/48077
CVE: CVE-2011-2328
Published: 2011-06-02
Description: Buffer overflow in HP LoadRunner allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a .usr (aka Virtual User script) file with long directives.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://www.kb.cert.org/vuls/id/987308; http://www.securityfocus.com/bid/48073; https://exchange.xforce.ibmcloud.com/vulnerabilities/67783
CVE: CVE-2011-2329
Published: 2011-06-02
Description: The rampart_timestamp_token_validate function in util/rampart_timestamp_token.c in Apache Rampart/C 1.3.0 does not properly calculate the expiration of timestamp tokens, which allows remote attackers to bypass intended access restrictions by leveraging an expired token, a different vulnerability than CVE-2011-0730.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://launchpadlibrarian.net/72471990/rampart_1.3.0-1ubuntu2_1.3.0-1ubuntu3.diff.gz; http://www.ubuntu.com/usn/USN-1137-1; https://exchange.xforce.ibmcloud.com/vulnerabilities/67860
CVE: CVE-2011-2330
Published: 2011-06-02
Description: Tivoli Endpoint in IBM Tivoli Management Framework 3.7.1, 4.1, 4.1.1, and 4.3.1 has an unspecified "built-in account" that is "trivially" accessed, which makes it easier for remote attackers to send requests to restricted pages via a session on TCP port 9495, a different vulnerability than CVE-2011-1220.
CVSS Score: 9.0 (HIGH)
CWE: CWE-264
References: http://securityreason.com/securityalert/8268; http://www-01.ibm.com/support/docview.wss?uid=swg21499146; http://www.securityfocus.com/archive/1/518199/100/0/threaded
CVE: CVE-2011-2331
Published: 2011-06-02
Description: Integer overflow in img.exe in HP Intelligent Management Center (IMC) allows remote attackers to execute arbitrary code via a crafted length value in an a packet that triggers a heap-based buffer overflow, possibly related to an "recv" field.
CVSS Score: 10.0 (HIGH)
CWE: CWE-189
References: http://secunia.com/advisories/44748; http://securitytracker.com/id?1025583; http://www.securityfocus.com/bid/48065
CVE: CVE-2011-2382
Published: 2011-06-03
Description: Microsoft Internet Explorer 8 and earlier, and Internet Explorer 9 beta, does not properly restrict cross-zone drag-and-drop actions, which allows user-assisted remote attackers to read cookie files via vectors involving an IFRAME element with a SRC attribute containing a file: URL, as demonstrated by a Facebook game, related to a "cookiejacking" issue.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://conference.hackinthebox.org/hitbsecconf2011ams/?page_id=1388; http://ju12.tistory.com/attachment/cfile4.uf%40151FAB4C4DDC9E0002A6FE.ppt; http://news.cnet.com/8301-1009_3-20066419-83.html
CVE: CVE-2011-2383
Published: 2011-06-03
Description: Microsoft Internet Explorer 9 and earlier does not properly restrict cross-zone drag-and-drop actions, which allows user-assisted remote attackers to read cookie files via vectors involving an IFRAME element with a SRC attribute containing an http: URL that redirects to a file: URL, as demonstrated by a Facebook game, related to a "cookiejacking" issue, aka "Drag and Drop Information Disclosure Vulnerability." NOTE: this vulnerability exists because of an incomplete fix in the Internet Explorer 9 release.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://conference.hackinthebox.org/hitbsecconf2011ams/?page_id=1388; http://ju12.tistory.com/attachment/cfile4.uf%40151FAB4C4DDC9E0002A6FE.ppt; http://news.cnet.com/8301-1009_3-20066419-83.html
CVE: CVE-2011-0082
Published: 2011-06-06
Description: The X.509 certificate validation functionality in Mozilla Firefox 4.0.x through 4.0.1 does not properly implement single-session security exceptions, which might make it easier for user-assisted remote attackers to spoof an SSL server via an untrusted certificate that triggers potentially unwanted local caching of documents from that server.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=627552; http://openwall.com/lists/oss-security/2011/05/31/14; http://openwall.com/lists/oss-security/2011/05/31/18
CVE: CVE-2011-0767
Published: 2011-06-06
Description: Cross-site scripting (XSS) vulnerability in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall 6.2, 7.x, and 8.x allows remote attackers to inject arbitrary web script or HTML via an HTTP request to a firewalled server, aka Bug ID 31759.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/44772; http://www.imperva.com/resources/adc/adc_advisories_response_secureworks.html; http://www.kb.cert.org/vuls/id/567774
CVE: CVE-2011-1178
Published: 2011-06-06
Description: Multiple integer overflows in the load_image function in file-pcx.c in the Personal Computer Exchange (PCX) plugin in GIMP 2.6.x and earlier allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PCX image that triggers a heap-based buffer overflow.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-190
References: http://git.gnome.org/browse/gimp/commit/?id=a9671395f6573e90316a9d748588c5435216f6ce; http://secunia.com/advisories/50737; http://security.gentoo.org/glsa/glsa-201209-23.xml
CVE: CVE-2011-1752
Published: 2011-06-06
Description: The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.17, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request for a baselined WebDAV resource, as exploited in the wild in May 2011.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-476
References: http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062211.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061913.html
CVE: CVE-2011-1783
Published: 2011-06-06
Description: The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is enabled, allows remote attackers to cause a denial of service (infinite loop and memory consumption) in opportunistic circumstances by requesting data.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062211.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061913.html
CVE: CVE-2011-1787
Published: 2011-06-06
Description: Race condition in mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1 allows guest OS users to gain privileges on the guest OS by mounting a filesystem on top of an arbitrary directory.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-362
References: http://secunia.com/advisories/44840; http://secunia.com/advisories/44904; http://www.securityfocus.com/bid/48098
CVE: CVE-2011-1921
Published: 2011-06-06
Description: The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is disabled, does not properly enforce permissions for files that had been publicly readable in the past, which allows remote attackers to obtain sensitive information via a replay REPORT operation.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062211.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061913.html
CVE: CVE-2011-1948
Published: 2011-06-06
Description: Cross-site scripting (XSS) vulnerability in Plone 4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/72727; http://plone.org/products/plone/security/advisories/CVE-2011-1948; http://secunia.com/advisories/44775
CVE: CVE-2011-1949
Published: 2011-06-06
Description: Cross-site scripting (XSS) vulnerability in the safe_html filter in Products.PortalTransforms in Plone 2.1 through 4.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-2422.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://osvdb.org/72728; http://plone.org/products/plone/security/advisories/CVE-2011-1949; http://secunia.com/advisories/44775
CVE: CVE-2011-1950
Published: 2011-06-06
Description: plone.app.users in Plone 4.0 and 4.1 allows remote authenticated users to modify the properties of arbitrary accounts via unspecified vectors, as exploited in the wild in June 2011.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/72729; http://plone.org/products/plone/security/advisories/CVE-2011-1950; http://secunia.com/advisories/44775
CVE: CVE-2011-1952
Published: 2011-06-06
Description: common.php in Post Revolution before 0.8.0c-2 allows remote attackers to cause a denial of service (infinite loop) via malformed HTML markup, as demonstrated by an a< sequence.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://javierb.com.ar/2011/06/01/postrev-vunls/; http://postrev.com.ar/verpost.php?id_noticia=59; http://securityreason.com/securityalert/8270
CVE: CVE-2011-1953
Published: 2011-06-06
Description: Multiple cross-site scripting (XSS) vulnerabilities in common.php in Post Revolution before 0.8.0c-2 allow remote attackers to inject arbitrary web script or HTML via an attribute of a (1) P, a (2) STRONG, a (3) A, a (4) EM, a (5) I, a (6) IMG, a (7) LI, an (8) OL, a (9) VIDEO, or a (10) BLOCKQUOTE element.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://javierb.com.ar/2011/06/01/postrev-vunls/; http://postrev.com.ar/verpost.php?id_noticia=59; http://securityreason.com/securityalert/8270
CVE: CVE-2011-1954
Published: 2011-06-06
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Post Revolution 0.8.0c-2 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests to (1) ajax-weblog-guardar.php, (2) verpost.php, (3) comments.php, or (4) perfil.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://javierb.com.ar/2011/06/01/postrev-vunls/; http://osvdb.org/72641; http://postrev.com.ar/verpost.php?id_noticia=59
CVE: CVE-2011-1956
Published: 2011-06-06
Description: The bytes_repr_len function in Wireshark 1.4.5 uses an incorrect pointer argument, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via arbitrary TCP traffic.
CVSS Score: 4.3 (MEDIUM)
References: http://openwall.com/lists/oss-security/2011/05/31/19; http://openwall.com/lists/oss-security/2011/06/01/9; http://secunia.com/advisories/44449
CVE: CVE-2011-1957
Published: 2011-06-06
Description: The dissect_dcm_main function in epan/dissectors/packet-dcm.c in the DICOM dissector in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service (infinite loop) via an invalid PDU length.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://anonsvn.wireshark.org/viewvc?view=revision&revision=36958; http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061290.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061437.html
CVE: CVE-2011-1958
Published: 2011-06-06
Description: Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows user-assisted remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted Diameter dictionary file.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061290.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061437.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061477.html
CVE: CVE-2011-1959
Published: 2011-06-06
Description: The snoop_read function in wiretap/snoop.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 does not properly handle certain virtualizable buffers, which allows remote attackers to cause a denial of service (application crash) via a large length value in a snoop file that triggers a stack-based buffer over-read.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://anonsvn.wireshark.org/viewvc?view=revision&revision=37068; http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061290.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061437.html