deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-3055
Published: 2012-06-29
Description: Stack-based buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP11, T27 LD before SP32 CP2, and T28 L10N before SP1 allows remote attackers to execute arbitrary code via a crafted DHT chunk in a JPEG image within a WRF file, aka Bug ID CSCtz72953.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120627-webex; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120627-webex
CVE: CVE-2012-3056
Published: 2012-06-29
Description: Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP11, T27 LD before SP32 CP2, and T28 L10N before SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted WRF file, aka Bug ID CSCtz72946.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120627-webex; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120627-webex
CVE: CVE-2012-3057
Published: 2012-06-29
Description: Heap-based buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP11, T27 LD before SP32 CP2, and T28 L10N before SP1 allows remote attackers to execute arbitrary code via a crafted size field in audio data within a WRF file, aka Bug ID CSCtz00755.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120627-webex; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120627-webex
CVE: CVE-2012-3232
Published: 2012-06-29
Description: Cross-site scripting (XSS) vulnerability in search.php in web@all 2.0, as downloaded before May 30, 2012, allows remote attackers to inject arbitrary web script or HTML via the _text[title] parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/54109; https://www.htbridge.com/advisory/HTB23094; http://www.securityfocus.com/bid/54109
CVE: CVE-2012-3818
Published: 2012-06-29
Description: The fpm exporter in Revelation 0.4.13-2 and earlier encrypts the version number but not the password when exporting a file, which might allow local users to obtain sensitive information.
CVSS Score: 2.1 (LOW)
CWE: CWE-310
References: http://als.regnet.cz/fpm2/feedback/2; http://knoxin.blogspot.co.uk/2012/06/revelation-password-manager-considered.html; http://als.regnet.cz/fpm2/feedback/2
CVE: CVE-2010-5076
Published: 2012-06-29
Description: QSslSocket in Qt before 4.7.0-rc1 recognizes a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://qt.gitorious.org/qt/qt/commit/5f[PII_REDACTED]d368f75e431c4cdac88d7421cff0; http://qt.gitorious.org/qt/qt/commit/846f1b44eea4bb34d080d055badb40a4a13d369e; http://rhn.redhat.com/errata/RHSA-2012-0880.html
CVE: CVE-2012-0813
Published: 2012-06-29
Description: Wicd before 1.7.1 saves sensitive information in log files in /var/log/wicd, which allows context-dependent attackers to obtain passwords and other sensitive information.
CVSS Score: 2.1 (LOW)
CWE: CWE-255
References: http://bazaar.launchpad.net/~wicd-devel/wicd/experimental/revision/682; http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652417; http://secunia.com/advisories/49657
CVE: CVE-2012-1118
Published: 2012-06-29
Description: The access_has_bug_level function in core/access_api.php in MantisBT before 1.2.9 does not properly restrict access when the private_bug_view_threshold is set to an array, which allows remote attackers to bypass intended restrictions and perform certain operations on private bug reports.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092926.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093063.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093064.html
CVE: CVE-2012-1119
Published: 2012-06-29
Description: MantisBT before 1.2.9 does not audit when users copy or clone a bug report, which makes it easier for remote attackers to copy bug reports without detection.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-264
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092926.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093063.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093064.html
CVE: CVE-2012-1120
Published: 2012-06-29
Description: The SOAP API in MantisBT before 1.2.9 does not properly enforce the bugnote_allow_user_edit_delete and delete_bug_threshold permissions, which allows remote authenticated users with read and write SOAP API privileges to delete arbitrary bug reports and bug notes.
CVSS Score: 3.6 (LOW)
CWE: CWE-264
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092926.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093063.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093064.html
CVE: CVE-2012-1121
Published: 2012-06-29
Description: MantisBT before 1.2.9 does not properly check permissions, which allows remote authenticated users with manager privileges to (1) modify or (2) delete global categories.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-264
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092926.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093063.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093064.html
CVE: CVE-2012-1122
Published: 2012-06-29
Description: bug_actiongroup.php in MantisBT before 1.2.9 does not properly check the report_bug_threshold permission of the receiving project when moving a bug report, which allows remote authenticated users with the report_bug_threshold and move_bug_threshold privileges for a project to bypass intended access restrictions and move bug reports to a different project.
CVSS Score: 3.6 (LOW)
CWE: CWE-264
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092926.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093063.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093064.html
CVE: CVE-2012-1123
Published: 2012-06-29
Description: The mci_check_login function in api/soap/mc_api.php in the SOAP API in MantisBT before 1.2.9 allows remote attackers to bypass authentication via a null password.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092926.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093063.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093064.html
CVE: CVE-2012-1164
Published: 2012-06-29
Description: slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an LDAP search query with attrsOnly set to true, which causes empty attributes to be returned.
CVSS Score: 2.6 (LOW)
CWE: CWE-119
References: http://rhn.redhat.com/errata/RHSA-2012-0899.html; http://seclists.org/fulldisclosure/2019/Dec/26; http://secunia.com/advisories/48372
CVE: CVE-2012-2098
Published: 2012-06-29
Description: Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream (BZip2CompressorOutputStream) in Apache Commons Compress before 1.4.1 allows remote attackers to cause a denial of service (CPU consumption) via a file with many repeating inputs.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://ant.apache.org/security.html; http://archives.neohapsis.com/archives/bugtraq/2012-05/0130.html; http://commons.apache.org/compress/security.html
CVE: CVE-2012-2385
Published: 2012-06-29
Description: The terminal dispatcher in mosh before 1.2.1 allows remote authenticated users to cause a denial of service (long loop and CPU consumption) via an escape sequence with a large repeat count value.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-399
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082766.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082814.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082850.html
CVE: CVE-2012-2664
Published: 2012-06-29
Description: The sosreport utility in the Red Hat sos package before 2.2-29 does not remove the root user password information from the Kickstart configuration file (/root/anaconda-ks.cfg) when creating an archive of debugging information, which might allow attackers to obtain passwords or password hashes.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-255
References: http://rhn.redhat.com/errata/RHSA-2012-0958.html; http://rhn.redhat.com/errata/RHSA-2013-1121.html; http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2[PII_REDACTED].html
CVE: CVE-2012-2690
Published: 2012-06-29
Description: virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable permissions when editing, which might allow local guest users to obtain sensitive information.
CVSS Score: 2.1 (LOW)
CWE: CWE-255
References: http://rhn.redhat.com/errata/RHSA-2012-0774.html; http://secunia.com/advisories/49431; http://secunia.com/advisories/49545
CVE: CVE-2012-2698
Published: 2012-06-29
Description: Cross-site scripting (XSS) vulnerability in the outputPage function in includes/SkinTemplate.php in MediaWiki before 1.17.5, 1.18.x before 1.18.4, and 1.19.x before 1.19.1 allows remote attackers to inject arbitrary web script or HTML via the uselang parameter to index.php/Main_page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-June/000116.html; http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-June/000117.html; http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-June/000118.html
CVE: CVE-2012-2709
Published: 2012-06-29
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-2907.  Reason: This candidate is a duplicate of CVE-2012-2907.  Notes: All CVE users should reference CVE-2012-2907 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2012-2012
Published: 2012-06-29
Description: HP System Management Homepage (SMH) before 7.1.1 does not have an off autocomplete attribute for unspecified form fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.
CVSS Score: 10.0 (HIGH)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041
CVE: CVE-2012-2013
Published: 2012-06-29
Description: Unspecified vulnerability in HP System Management Homepage (SMH) before 7.1.1 allows remote attackers to cause a denial of service, or possibly obtain sensitive information or modify data, via unknown vectors.
CVSS Score: 7.5 (HIGH)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041
CVE: CVE-2012-2014
Published: 2012-06-29
Description: HP System Management Homepage (SMH) before 7.1.1 does not properly validate input, which allows remote authenticated users to have an unspecified impact via unknown vectors.
CVSS Score: 9.0 (HIGH)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041
CVE: CVE-2012-2015
Published: 2012-06-29
Description: Unspecified vulnerability in HP System Management Homepage (SMH) before 7.1.1 allows remote authenticated users to gain privileges and obtain sensitive information via unknown vectors.
CVSS Score: 9.0 (HIGH)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041
CVE: CVE-2012-2016
Published: 2012-06-29
Description: Unspecified vulnerability in HP System Management Homepage (SMH) before 7.1.1 allows local users to obtain sensitive information via unknown vectors.
CVSS Score: 4.9 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041
CVE: CVE-2012-2017
Published: 2012-06-30
Description: Unspecified vulnerability on HP Photosmart Wireless e-All-in-One B110, e-All-in-One D110, Plus e-All-in-One B210, eStation All-in-One C510, Ink Advantage e-All-in-One K510, and Premium Fax e-All-in-One C410 printers allows remote attackers to cause a denial of service via unknown vectors.
CVSS Score: 7.8 (HIGH)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02931414; http://www.securitytracker.com/id?1027213; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02931414
CVE: CVE-2012-2392
Published: 2012-06-30
Description: Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allows remote attackers to cause a denial of service (infinite loop) via vectors related to the (1) ANSI MAP, (2) ASF, (3) IEEE 802.11, (4) IEEE 802.3, and (5) LTP dissectors.
CVSS Score: 3.3 (LOW)
CWE: CWE-399
References: http://secunia.com/advisories/49226; http://www.mandriva.com/security/advisories?name=MDVSA-2012:015; http://www.mandriva.com/security/advisories?name=MDVSA-2012:042
CVE: CVE-2012-2393
Published: 2012-06-30
Description: epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 does not properly construct certain array data structures, which allows remote attackers to cause a denial of service (application crash) via a crafted packet that triggers incorrect memory allocation.
CVSS Score: 3.3 (LOW)
CWE: CWE-119
References: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-diameter.c?r1=42200&r2=42199&pathrev=42200; http://anonsvn.wireshark.org/viewvc?view=revision&revision=42200; http://secunia.com/advisories/49226
CVE: CVE-2012-2394
Published: 2012-06-30
Description: Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 on the SPARC and Itanium platforms does not properly perform data alignment for a certain structure member, which allows remote attackers to cause a denial of service (application crash) via a (1) ICMP or (2) ICMPv6 Echo Request packet.
CVSS Score: 3.3 (LOW)
CWE: CWE-119
References: http://anonsvn.wireshark.org/viewvc?view=revision&revision=42393; http://secunia.com/advisories/49226; http://www.mandriva.com/security/advisories?name=MDVSA-2012:015
CVE: CVE-2012-3825
Published: 2012-06-30
Description: Multiple integer overflows in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allow remote attackers to cause a denial of service (infinite loop) via vectors related to the (1) BACapp and (2) Bluetooth HCI dissectors, a different vulnerability than CVE-2012-2392.
CVSS Score: 3.3 (LOW)
CWE: CWE-189
References: http://secunia.com/advisories/49226; http://www.securitytracker.com/id?1027094; http://www.wireshark.org/security/wnpa-sec-2012-08.html
CVE: CVE-2012-3826
Published: 2012-06-30
Description: Multiple integer underflows in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allow remote attackers to cause a denial of service (loop) via vectors related to the R3 dissector, a different vulnerability than CVE-2012-2392.
CVSS Score: 3.3 (LOW)
CWE: CWE-189
References: http://secunia.com/advisories/49226; http://www.securitytracker.com/id?1027094; http://www.wireshark.org/security/wnpa-sec-2012-08.html
CVE: CVE-2011-2485
Published: 2012-07-03
Description: The gdk_pixbuf__gif_image_load function in gdk-pixbuf/io-gif.c in gdk-pixbuf before 2.23.5 does not properly handle certain return values, which allows remote attackers to cause a denial of service (memory consumption) via a crafted GIF image file.
CVSS Score: 4.3 (MEDIUM)
References: http://ftp.gnome.org/pub/GNOME/sources/gdk-pixbuf/2.23/gdk-pixbuf-2.23.5.news; http://git.gnome.org/browse/gdk-pixbuf/commit/?id=f8569bb13e2aa1584dde61ca545144750f7a7c98; http://secunia.com/advisories/45656
CVE: CVE-2011-2716
Published: 2012-07-03
Description: The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in the (1) HOST_NAME, (2) DOMAIN_NAME, (3) NIS_DOMAIN, and (4) TFTP_SERVER_NAME host name options.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://downloads.avaya.com/css/P8/documents/100158840; http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html; http://rhn.redhat.com/errata/RHSA-2012-0810.html
CVE: CVE-2011-4086
Published: 2012-07-03
Description: The journal_unmap_buffer function in fs/jbd2/transaction.c in the Linux kernel before 3.3.1 does not properly handle the _Delay and _Unwritten buffer head states, which allows local users to cause a denial of service (system crash) by leveraging the presence of an ext4 filesystem that was mounted with a journal.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-119
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=15291164b22a357cb211b618adfef4fa82fc0de3; http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html; http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html
CVE: CVE-2011-4127
Published: 2012-07-03
Description: The Linux kernel before 3.2.2 does not properly restrict SG_IO ioctl calls, which allows local users to bypass intended restrictions on disk read and write operations by sending a SCSI command to (1) a partition block device or (2) an LVM volume.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0bfc96cb77224736dfa35c3c555d37b3646ef35e; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ec8013beddd717d1740cfefb1a9b900deef85462; http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html
CVE: CVE-2012-0045
Published: 2012-07-03
Description: The em_syscall function in arch/x86/kvm/emulate.c in the KVM implementation in the Linux kernel before 3.2.14 does not properly handle the 0f05 (aka syscall) opcode, which allows guest OS users to cause a denial of service (guest OS crash) via a crafted application, as demonstrated by an NASM file.
CVSS Score: 4.7 (MEDIUM)
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c2226fc9e87ba3da060e47333657cd6616652b84; http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html; http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.14
CVE: CVE-2012-0833
Published: 2012-07-03
Description: The acllas__handle_group_entry function in servers/plugins/acl/acllas.c in 389 Directory Server before 1.2.10 does not properly handled access control instructions (ACIs) that use certificate groups, which allows remote authenticated LDAP users with a certificate group to cause a denial of service (infinite loop and CPU consumption) by binding to the server.
CVSS Score: 2.3 (LOW)
CWE: CWE-264
References: http://rhn.redhat.com/errata/RHSA-2012-0813.html; http://secunia.com/advisories/48035; http://secunia.com/advisories/49562
CVE: CVE-2012-1106
Published: 2012-07-03
Description: The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does not properly set the group (GID) permissions on core dump files for setuid programs when the sysctl fs.suid_dumpable option is set to 2, which allows local users to obtain sensitive information.
CVSS Score: 1.9 (LOW)
CWE: CWE-264
References: http://rhn.redhat.com/errata/RHSA-2012-0841.html; http://www.securityfocus.com/bid/54121; https://exchange.xforce.ibmcloud.com/vulnerabilities/76524
CVE: CVE-2012-2100
Published: 2012-07-03
Description: The ext4_fill_flex_info function in fs/ext4/super.c in the Linux kernel before 3.2.2, on the x86 platform and unspecified other platforms, allows user-assisted remote attackers to trigger inconsistent filesystem-groups data and possibly cause a denial of service via a malformed ext4 filesystem containing a super block with a large FLEX_BG group size (aka s_log_groups_per_flex value).  NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-4307.
CVSS Score: 7.1 (HIGH)
CWE: CWE-189
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d50f2ab6f050311dbf7b8f5501b25f0bf64a439b; http://rhn.redhat.com/errata/RHSA-2012-1445.html; http://rhn.redhat.com/errata/RHSA-2012-1580.html
CVE: CVE-2012-2133
Published: 2012-07-03
Description: Use-after-free vulnerability in the Linux kernel before 3.3.6, when huge pages are enabled, allows local users to cause a denial of service (system crash) or possibly gain privileges by interacting with a hugetlbfs filesystem, as demonstrated by a umount operation that triggers improper handling of quota data.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-399
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=90481622d75715bfcb68501280a917dbfe516029; http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html; http://www.debian.org/security/2012/dsa-2469
CVE: CVE-2012-2678
Published: 2012-07-03
Description: 389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), after the password for a LDAP user has been changed and before the server has been reset, allows remote attackers to read the plaintext password via the unhashed#user#password attribute.
CVSS Score: 1.2 (LOW)
CWE: CWE-310
References: http://directory.fedoraproject.org/wiki/Release_Notes; http://osvdb.org/83336; http://rhn.redhat.com/errata/RHSA-2012-0997.html
CVE: CVE-2012-2746
Published: 2012-07-03
Description: 389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), when the password of a LDAP user has been changed and audit logging is enabled, saves the new password to the log in plain text, which allows remote authenticated users to read the password.
CVSS Score: 2.1 (LOW)
CWE: CWE-310
References: http://directory.fedoraproject.org/wiki/Release_Notes; http://rhn.redhat.com/errata/RHSA-2012-0997.html; http://rhn.redhat.com/errata/RHSA-2012-1041.html
CVE: CVE-2012-3366
Published: 2012-07-03
Description: The Trigger plugin in bcfg2 1.2.x before 1.2.3 allows remote attackers with root access to the client to execute arbitrary commands via shell metacharacters in the UUID field to the server process (bcfg2-server).
CVSS Score: 9.0 (HIGH)
CWE: CWE-78
References: http://permalink.gmane.org/gmane.comp.sysutils.bcfg2.devel/4539; http://secunia.com/advisories/49629; http://secunia.com/advisories/49690
CVE: CVE-2011-4028
Published: 2012-07-03
Description: The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to determine the existence of arbitrary files via a symlink attack on a temporary lock file, which is handled differently if the file exists.
CVSS Score: 1.2 (LOW)
CWE: CWE-59
References: http://cgit.freedesktop.org/xorg/xserver/commit/?id=6ba44b91e37622ef8c146d8f2ac92d708a18ed34; http://lists.freedesktop.org/archives/xorg/2011-October/053680.html; http://rhn.redhat.com/errata/RHSA-2012-0939.html