deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-3881
Published: 2010-12-23
Description: arch/x86/kvm/x86.c in the Linux kernel before 2.6.36.2 does not initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via read operations on the /dev/kvm device.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=97e69aa62f8b5d338d6cff49be09e37cc1262838; http://git.kernel.org/?p=virt/kvm/kvm.git%3Ba=commit%3Bh=831d9d02f9522e739825a51a11e3bc5aa531a905; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html
CVE: CVE-2010-3972
Published: 2010-12-23
Description: Heap-based buffer overflow in the TELNET_STREAM_CONTEXT::OnSendData function in ftpsvc.dll in Microsoft FTP Service 7.0 and 7.5 for Internet Information Services (IIS) 7.0, and IIS 7.5, allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted FTP command, aka "IIS FTP Service Heap Buffer Overrun Vulnerability." NOTE: some of these details are obtained from third party information.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx; http://secunia.com/advisories/42713; http://www.exploit-db.com/exploits/15803
CVE: CVE-2010-3973
Published: 2010-12-23
Description: The WMITools ActiveX control in WBEMSingleView.ocx 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted argument to the AddContextRef method, possibly an untrusted pointer dereference, aka "Microsoft WMITools ActiveX Control Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx; http://secunia.com/advisories/42693; http://www.exploit-db.com/exploits/15809
CVE: CVE-2010-4519
Published: 2010-12-23
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Views UI implementation in the Views module 5.x before 5.x-1.8 and 6.x before 6.x-2.11 for Drupal allow remote attackers to hijack the authentication of administrators for requests that (1) enable all Views or (2) disable all Views.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://drupal.org/node/829840; http://www.openwall.com/lists/oss-security/2010/12/16/7; http://www.openwall.com/lists/oss-security/2010/12/22/1
CVE: CVE-2010-4520
Published: 2010-12-23
Description: Multiple cross-site scripting (XSS) vulnerabilities in the Views module 6.x before 6.x-2.11 for Drupal allow remote attackers to inject arbitrary web script or HTML via (1) a URL or (2) an aggregator feed title.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://drupal.org/node/829840; http://www.openwall.com/lists/oss-security/2010/12/16/7; http://www.openwall.com/lists/oss-security/2010/12/22/1
CVE: CVE-2010-4521
Published: 2010-12-23
Description: Cross-site scripting (XSS) vulnerability in the Views module 6.x before 6.x-2.12 for Drupal allows remote attackers to inject arbitrary web script or HTML via a page path.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://drupal.org/node/999380; http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052802.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052814.html
CVE: CVE-2010-4588
Published: 2010-12-23
Description: The WBEMSingleView.ocx ActiveX control 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier allows remote attackers to execute arbitrary code via a crafted argument to the ReleaseContext method, a different vector than CVE-2010-3973, possibly an untrusted pointer dereference.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx; http://secunia.com/advisories/42693; http://twitter.com/carsteneiram/status/[PII_REDACTED]110784
CVE: CVE-2010-4597
Published: 2010-12-23
Description: Stack-based buffer overflow in the save method in the IntegraXor.Project ActiveX control in igcomm.dll in Ecava IntegraXor Human-Machine Interface (HMI) before 3.5.3900.10 allows remote attackers to execute arbitrary code via a long string in the second argument.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/42650; http://www.exploit-db.com/exploits/15767; http://www.integraxor.com/blog/integraxor-3-5-scada-security-issue-20[PII_REDACTED]-vulnerability-note
CVE: CVE-2010-4598
Published: 2010-12-23
Description: Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the file_name parameter in an open request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://aluigi.org/adv/integraxor_1-adv.txt; http://secunia.com/advisories/42730; http://www.exploit-db.com/exploits/15802
CVE: CVE-2010-4599
Published: 2010-12-23
Description: Untrusted search path vulnerability in Ecava IntegraXor 3.6.4000.0 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/42734; http://www.securityfocus.com/bid/45549; http://secunia.com/advisories/42734
CVE: CVE-2010-3859
Published: 2010-12-29
Description: Multiple integer signedness errors in the TIPC implementation in the Linux kernel before 2.6.36.2 allow local users to gain privileges via a crafted sendmsg call that triggers a heap-based buffer overflow, related to the tipc_msg_build function in net/tipc/msg.c and the verify_iovec function in net/core/iovec.c.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-787
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=253eacc070b114c2ec1f81b067d2fed7305467b0; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8acfe468b0384e834a303f08ebc4953d72fb690a; http://marc.info/?l=linux-netdev&m=[PII_REDACTED]1716&w=2
CVE: CVE-2010-3874
Published: 2010-12-29
Description: Heap-based buffer overflow in the bcm_connect function in net/can/bcm.c (aka the Broadcast Manager) in the Controller Area Network (CAN) implementation in the Linux kernel before 2.6.36.2 on 64-bit platforms might allow local users to cause a denial of service (memory corruption) via a connect operation.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-787
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0597d1b99fcfc2c0eada09a698f85ed413d4ba84; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052513.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html
CVE: CVE-2010-4343
Published: 2010-12-29
Description: drivers/scsi/bfa/bfa_core.c in the Linux kernel before 2.6.35 does not initialize a certain port data structure, which allows local users to cause a denial of service (system crash) via read operations on an fc_host statistics file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-665
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7873ca4e4401f0ecd8868bf[PII_REDACTED]e6bae61; http://secunia.com/advisories/42884; http://secunia.com/advisories/46397
CVE: CVE-2010-4565
Published: 2010-12-29
Description: The bcm_connect function in net/can/bcm.c (aka the Broadcast Manager) in the Controller Area Network (CAN) implementation in the Linux kernel 2.6.36 and earlier creates a publicly accessible file with a filename containing a kernel memory address, which allows local users to obtain potentially sensitive information about kernel memory use by listing this filename.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://openwall.com/lists/oss-security/2010/11/03/3; http://openwall.com/lists/oss-security/2010/11/04/4; http://openwall.com/lists/oss-security/2010/12/20/2
CVE: CVE-2010-4600
Published: 2010-12-29
Description: Dojo Toolkit, as used in the Web client in IBM Rational ClearQuest 7.1.1.x before 7.1.1.4 and 7.1.2.x before 7.1.2.1, allows remote attackers to read cookies by navigating to a Dojo file, related to an "open direct" issue.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: ftp://public.dhe.ibm.com/software/rational/clearquest/7.1.1/7.1.1.4-RATL-RCQ/7.1.1.4-RATL-RCQ.ux.readme; http://secunia.com/advisories/42624; http://www-01.ibm.com/support/docview.wss?uid=swg1PM15146
CVE: CVE-2010-4601
Published: 2010-12-29
Description: Multiple unspecified vulnerabilities in IBM Rational ClearQuest 7.0.x before 7.0.1.11, 7.1.1.x before 7.1.1.4, and 7.1.2.x before 7.1.2.1 allow attackers to have an unknown impact via vectors related to third-party .ocx files.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/42624; http://www-01.ibm.com/support/docview.wss?uid=swg1PM01811; http://secunia.com/advisories/42624
CVE: CVE-2010-4602
Published: 2010-12-29
Description: The Web client in IBM Rational ClearQuest 7.1.1.x before 7.1.1.4 and 7.1.2.x before 7.1.2.1 allows remote authenticated users to bypass "restricted user" limitations, and read arbitrary records, via a modified record number in the URL for a RECORD action, as demonstrated by a modified bookmark.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: ftp://public.dhe.ibm.com/software/rational/clearquest/7.1.1/7.1.1.4-RATL-RCQ/7.1.1.4-RATL-RCQ.ux.readme; http://www-01.ibm.com/support/docview.wss?uid=swg1PM20172; http://www.securityfocus.com/bid/45646
CVE: CVE-2010-4603
Published: 2010-12-29
Description: IBM Rational ClearQuest 7.0.x before 7.0.1.11, 7.1.1.x before 7.1.1.4, and 7.1.2.x before 7.1.2.1 does not prevent modification of back-reference fields, which allows remote authenticated users to interfere with intended record relationships, and possibly cause a denial of service (loop) or have unspecified other impact, by (1) adding or (2) removing a back reference.
CVSS Score: 6.5 (MEDIUM)
References: ftp://public.dhe.ibm.com/software/rational/clearquest/7.1.1/7.1.1.4-RATL-RCQ/7.1.1.4-RATL-RCQ.ux.readme; http://www-01.ibm.com/support/docview.wss?uid=swg1PM22186; http://www-01.ibm.com/support/docview.wss?uid=swg21125139
CVE: CVE-2010-4604
Published: 2010-12-29
Description: Stack-based buffer overflow in the GeneratePassword function in dsmtca (aka the Trusted Communications Agent or TCA) in the backup-archive client in IBM Tivoli Storage Manager (TSM) 5.3.x before 5.3.6.10, 5.4.x before 5.4.3.4, 5.5.x before 5.5.2.10, and 6.1.x before 6.1.3.1 on Unix and Linux allows local users to gain privileges by specifying a long LANG environment variable, and then sending a request over a pipe.
CVSS Score: 7.2 (HIGH)
CWE: CWE-787
References: http://secunia.com/advisories/42639; http://securitytracker.com/id?1024901; http://www-01.ibm.com/support/docview.wss?uid=swg1IC65491
CVE: CVE-2010-4605
Published: 2010-12-29
Description: Unspecified vulnerability in the backup-archive client in IBM Tivoli Storage Manager (TSM) 5.3.x before 5.3.6.10, 5.4.x before 5.4.3.4, 5.5.x before 5.5.3, 6.1.x before 6.1.4, and 6.2.x before 6.2.2 on Unix and Linux allows local users to overwrite arbitrary files via unknown vectors.
CVSS Score: 6.6 (MEDIUM)
References: http://secunia.com/advisories/42639; http://securitytracker.com/id?1024901; http://www-01.ibm.com/support/docview.wss?uid=swg1IC66686
CVE: CVE-2010-4606
Published: 2010-12-29
Description: Unspecified vulnerability in the Space Management client in the Hierarchical Storage Management (HSM) component in IBM Tivoli Storage Manager (TSM) 5.4.x before 5.4.3.4, 5.5.x before 5.5.3, 6.1.x before 6.1.4, and 6.2.x before 6.2.2 on Unix and Linux allows remote attackers to execute arbitrary commands via unknown vectors, related to a "script execution vulnerability."
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/42639; http://securitytracker.com/id?1024901; http://www-01.ibm.com/support/docview.wss?uid=swg1IC69150
CVE: CVE-2010-4607
Published: 2010-12-29
Description: Multiple cross-site scripting (XSS) vulnerabilities in Habari 0.6.5, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) additem_form parameter to system/admin/dash_additem.php and the (2) status_data[] parameter to system/admin/dash_status.php.  NOTE: some of these details are obtained from third party information.
CVSS Score: 2.6 (LOW)
CWE: CWE-79
References: http://secunia.com/advisories/42688; http://wiki.habariproject.org/en/Release_0.6.6; http://www.exploit-db.com/exploits/15799
CVE: CVE-2010-4608
Published: 2010-12-29
Description: Habari 0.6.5 allows remote attackers to obtain sensitive information via a direct request to (1) header.php and (2) comments_items.php in system/admin/, which reveals the installation path in an error message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://wiki.habariproject.org/en/Release_0.6.6; http://www.exploit-db.com/exploits/15799; http://www.htbridge.ch/advisory/path_disclosure_in_habari.html
CVE: CVE-2010-4609
Published: 2010-12-29
Description: SQL injection vulnerability in index.php in Html-edit CMS 3.1.8 allows remote attackers to execute arbitrary SQL commands via the nuser parameter in a registrate action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/42664; http://www.exploit-db.com/exploits/15800; http://www.htbridge.ch/advisory/sql_injection_in_html_edit_cms.html
CVE: CVE-2010-4610
Published: 2010-12-29
Description: Cross-site scripting (XSS) vulnerability in index.php in Html-edit CMS 3.1.8 allows remote attackers to inject arbitrary web script or HTML via the error parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/42664; http://www.exploit-db.com/exploits/15800; http://www.htbridge.ch/advisory/xss_in_html_edit_cms.html
CVE: CVE-2010-4611
Published: 2010-12-29
Description: Html-edit CMS 3.1.8 allows remote attackers to obtain sensitive information via a direct request to (1) pages.php and (2) menu.php in includes/core_files and (3) extensions/login/frontend/pages/antihacker.php, which reveals the installation path in an error message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.exploit-db.com/exploits/15800; http://www.htbridge.ch/advisory/path_disclosure_in_html_edit_cms.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/64437
CVE: CVE-2010-4612
Published: 2010-12-29
Description: Multiple SQL injection vulnerabilities in index.php in Hycus CMS 1.0.3, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) user_name and (2) usr_email parameters to user/1/hregister.html, (3) usr_email parameter to user/1/hlogin.html, (4) useremail parameter to user/1/forgotpass.html, and the (5) q parameter to search/1.html.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/42567; http://www.exploit-db.com/exploits/15797; http://www.htbridge.ch/advisory/sql_injection_in_hycus_cms.html
CVE: CVE-2010-4613
Published: 2010-12-29
Description: Multiple directory traversal vulnerabilities in Hycus CMS 1.0.3 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the site parameter to (1) index.php and (2) admin.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.exploit-db.com/exploits/15797; http://www.htbridge.ch/advisory/lfi_in_hycus_cms.html; http://www.securityfocus.com/bid/45527
CVE: CVE-2010-4614
Published: 2010-12-29
Description: SQL injection vulnerability in item.php in Ero Auktion 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2010-0723.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/38666; http://www.exploit-db.com/exploits/15769; http://www.securityfocus.com/bid/45503
CVE: CVE-2010-4615
Published: 2010-12-29
Description: Multiple SQL injection vulnerabilities in Oto Galeri Sistemi 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) arac parameter to carsdetail.asp and the (2) marka parameter to twohandscars.asp.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/42706; http://www.exploit-db.com/exploits/15777; http://www.securityfocus.com/bid/45513
CVE: CVE-2010-4616
Published: 2010-12-29
Description: Cross-site scripting (XSS) vulnerability in modules/content/admin/content.php in ImpressCMS 1.2.3 Final, and possibly other versions before 1.2.4, allows remote attackers to inject arbitrary web script or HTML via the quicksearch_ContentContent parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://community.impresscms.org/modules/smartsection/item.php?itemid=525; http://secunia.com/advisories/42695; http://www.htbridge.ch/advisory/xss_vulnerability_in_impresscms.html
CVE: CVE-2010-4617
Published: 2010-12-29
Description: Directory traversal vulnerability in the JotLoader (com_jotloader) component 2.2.1 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the section parameter to index.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.org/files/view/96812/joomlajotloader-lfi.txt; http://www.exploit-db.com/exploits/15791; https://exchange.xforce.ibmcloud.com/vulnerabilities/64223
CVE: CVE-2010-4618
Published: 2010-12-29
Description: Cross-site scripting (XSS) vulnerability in the Algis Info aiContactSafe component before 2.0.14 for Joomla! allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/42723; http://www.algisinfo.com/forum/announcements-english/aicontactsafe-2-0-14.html; http://www.algisinfo.com/joomla/aicontactsafe-change-log.html
CVE: CVE-2010-4619
Published: 2010-12-29
Description: SQL injection vulnerability in profil.php in Mafya Oyun Scrpti (aka Mafia Game Script) allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/42710; http://www.exploit-db.com/exploits/15775; http://www.securityfocus.com/bid/45501
CVE: CVE-2010-3848
Published: 2010-12-30
Description: Stack-based buffer overflow in the econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2, when an econet address is configured, allows local users to gain privileges by providing a large number of iovec structures.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-787
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a27e13d370415add3487949c60810e36069a23a6; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html
CVE: CVE-2010-3849
Published: 2010-12-30
Description: The econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2, when an econet address is configured, allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a sendmsg call that specifies a NULL value for the remote address field.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-476
References: http://archives.neohapsis.com/archives/fulldisclosure/2010-12/0086.html; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fa0e846494792e722d817b9d3d625a4ef4896c96; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00007.html
CVE: CVE-2010-3850
Published: 2010-12-30
Description: The ec_dev_ioctl function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2 does not require the CAP_NET_ADMIN capability, which allows local users to bypass intended access restrictions and configure econet addresses via an SIOCSIFADDR ioctl call.
CVSS Score: 2.1 (LOW)
References: http://archives.neohapsis.com/archives/fulldisclosure/2010-12/0086.html; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=16c41745c7b92a243d0874f534c1655196c64b74; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00007.html
CVE: CVE-2010-4158
Published: 2010-12-30
Description: The sk_run_filter function in net/core/filter.c in the Linux kernel before 2.6.36.2 does not check whether a certain memory location has been initialized before executing a (1) BPF_S_LD_MEM or (2) BPF_S_LDX_MEM instruction, which allows local users to obtain potentially sensitive information from kernel stack memory via a crafted socket filter.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=57fe93b374a6b8711995c2d466c502af9f3a08bb; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052513.html; http://lists.grok.org.uk/pipermail/full-disclosure/2010-November/077321.html
CVE: CVE-2010-4161
Published: 2010-12-30
Description: The udp_queue_rcv_skb function in net/ipv4/udp.c in a certain Red Hat build of the Linux kernel 2.6.18 in Red Hat Enterprise Linux (RHEL) 5 allows attackers to cause a denial of service (deadlock and system hang) by sending UDP traffic to a socket that has a crafted socket filter, a related issue to CVE-2010-4158.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-399
References: http://secunia.com/advisories/42789; http://secunia.com/advisories/46397; http://www.redhat.com/support/errata/RHSA-2011-0004.html
CVE: CVE-2010-4258
Published: 2010-12-30
Description: The do_exit function in kernel/exit.c in the Linux kernel before 2.6.36.2 does not properly handle a KERNEL_DS get_fs value, which allows local users to bypass intended access_ok restrictions, overwrite arbitrary kernel memory locations, and gain privileges by leveraging a (1) BUG, (2) NULL pointer dereference, or (3) page fault, as demonstrated by vectors involving the clear_child_tid feature and the splice system call.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-269
References: http://archives.neohapsis.com/archives/fulldisclosure/2010-12/0086.html; http://blog.nelhage.com/2010/12/cve-2010-4258-from-dos-to-privesc/; http://code.google.com/p/chromium-os/issues/detail?id=10234
CVE: CVE-2010-4276
Published: 2010-12-30
Description: Cross-site scripting (XSS) vulnerability in the lz_tracking_set_sessid function in templates/jscript/jstrack.tpl in LiveZilla 3.2.0.2 allows remote attackers to inject arbitrary web script or HTML via the livezilla parameter in a track action to server.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2010/Dec/650; http://secunia.com/advisories/42748; http://www.conviso.com.br/livezilla-cross-site-scripting-vulnerability-cve-2010-4276/
CVE: CVE-2010-4321
Published: 2010-12-30
Description: Stack-based buffer overflow in an ActiveX control in ienipp.ocx in Novell iPrint Client 5.52 allows remote attackers to execute arbitrary code via a long argument to (1) the GetDriverSettings2 method, as reachable by (2) the GetDriverSettings method.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://securityreason.com/securityalert/8125; http://www.exploit-db.com/exploits/16014; http://www.novell.com/support/viewContent.do?externalId=7007234
CVE: CVE-2010-4342
Published: 2010-12-30
Description: The aun_incoming function in net/econet/af_econet.c in the Linux kernel before 2.6.37-rc6, when Econet is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) by sending an Acorn Universal Networking (AUN) packet over UDP.
CVSS Score: 7.1 (HIGH)
CWE: CWE-476
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4e085e76cbe558b79b54cbab772f61185879bc64; http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html; http://marc.info/?l=linux-netdev&m=[PII_REDACTED]3580&w=2